2026-10-05T06:44:04Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.7
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-05T06:44:04Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-05T06:44:04Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-05T06:44:04Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-05T06:44:04Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-c44dccd8c-8s4c6 logger=setup/leader-election v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-05T06:44:04Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-05T06:44:04Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-05T06:44:04Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-05T06:44:04Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-05T06:44:04Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-05T06:44:04Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-05T06:44:04Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-05T06:44:04Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-05T06:44:07Z INF kyverno/pkg/logging/log.go:180 > 2026/10/05 06:44:07 http: TLS handshake error from 10.130.0.2:55286: secret "konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair" not found logger=webhooks/server v=0
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=20255d76-f9db-49d7-9870-c9a836b9090d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=f8c806c8-fd30-4fbe-a391-40528f70142f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=fc8f6f74-cb7e-422e-bd51-77b6479f8f3e v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=d517b277-8421-4222-8d7c-f7cee89a0479 v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=be996c74-a52e-4f54-adf4-13a9acad3afd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=23da55cf-05ec-4f38-9bc6-5c91779da86f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=2d76709f-11de-45c0-8564-42c7085f040f v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=738232c2-79cd-4345-8fb8-506791066f32 v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=7158222c-b77f-48fc-a728-32ccd815e0e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=4bf8c558-a0aa-42ae-868d-e6b791464ccd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=4e576e89-82bb-4739-8abf-16e20f2a78e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=7e5b226f-363a-4d3c-8407-0bad79b3f841 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=4df623f1-36f9-4738-a3fa-39d72bb5a700 v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=0c3c676b-7826-44f4-b35d-ddc981df78e3 v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=382bdc4e-72c9-4b41-8b19-1a27d3eeac32 v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=6e206fad-30b5-42c5-8dd9-4ce4fd4062b6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=88bffb51-fa03-4f48-be7f-95c4bbd19805 v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=c2b082af-91d9-44c9-a825-3dbaca337cb0 v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=454e6959-a89e-47d2-8d57-cb1a35d09fe0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=5bfbcf7a-0b2d-416a-944f-245743110dd5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=4f060ec8-d7e7-483a-9c9b-7a28e2efbc5f v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=26ae96b0-e4a8-44d0-bb25-414578e26e61 v=2
2026-10-05T06:45:29Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-05T06:45:29Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=01ed1562-1d13-4fbb-b620-a4bf081a9a3d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=3b9d4cdf-6289-410e-a6e9-7dde656afce7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=d5afe266-a52c-47e9-8923-5a04ef220b14 v=2
2026-10-05T06:45:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=1bc80b16-be26-4063-a57e-13df2a3b2d3f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:30Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-05T06:45:30Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=01bcc3a2-cd5c-44bb-8979-fe1e775bc1ea v=2
2026-10-05T06:45:30Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-05T06:45:30Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=a980568c-5f97-4612-9d02-3a60cad85c2d v=2
2026-10-05T06:45:30Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-05T06:45:30Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-05T06:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=76ed5d0c-c21a-4294-b1d7-cd06122f226f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=78d5a014-53be-4c21-8c16-6919ce0a88b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:31Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=be8c0759-fb03-47d0-a458-d292eed3b5f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:33Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=f931f908-cc2f-4807-829d-b7438dfb18ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:33Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e061c42c-e80b-4561-bc34-ebecd0cedfc0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:33Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=903baaae-1c95-47ee-90e8-22426a2e31f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:33Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=febd7b35-4b15-4700-a980-ea7a36dbf085 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=releases-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/releases-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:tekton-pipelines-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=015ed8ed-fae4-45f2-baee-b2eb54d4a09c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=vacuum-all namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/vacuum-all resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:tekton-pipelines-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c488d608-5e7b-4820-bd01-4bfa5d60aaa0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=pipelines-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/pipelines-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:tekton-pipelines-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d48f7b1e-f888-413c-869c-17bd56a35011 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=d853cd52-96a3-49fa-b1b5-df1c9a3cc479 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=c1123bf4-aff9-4014-92cd-9213a64d925b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=66476e31-17ab-4b15-b8f8-6d74c776c20f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c2ad1776-d245-4f4c-a089-4c9bd338b26b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4600d8f7-c8a9-4db8-b220-2cd5bb2be4a4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=4b3388ca-a09f-4402-90f8-4f7439bd962b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=9febc83f-8e5d-4549-a29e-07f5ab9aa281 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=4f4e7592-6287-473c-8f5a-c8e97e3b590e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4426f398-b065-4026-a96f-b8177458a438 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=cf86c353-12ba-4794-9486-7dd1cdef4f0e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1486bb90-129e-4d62-8390-9317dfe4feb2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=bb870e63-7742-4ae8-bc5a-31e8554349eb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=2438ca52-e0ee-494f-8b9a-e9ce5f0cdf74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=23a223c1-0d97-41fe-ab2e-fc53805c5940 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=53df7d05-4394-4c4b-b556-da859362ab8f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=9bd7ceda-7d58-43d8-b387-7f4c1db0412f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=194b10e9-664f-43e2-a6b7-205f17db348d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0c342b43-feaa-4e05-a189-4750c9cbf0d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=75c08770-e77a-4936-9e0e-00ca9b3488b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=2027d56e-f07f-4622-aed6-b1159295814e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=558518f5-4ef5-4f73-a097-10ab725bcf3d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=a6974e92-4e48-425d-abc5-147bdcf47cc3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d6027539-14a4-4c9f-ab72-f81baee17e91 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=ddb564fd-2482-4028-b331-161d494c0121 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=86966f98-4d8f-4bb3-a961-8bc242170f74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a257e6cf-3fdd-44e9-9986-8d5c66ef0eb7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=affc83f7-d3cd-4dc7-9afb-41e7e7385f33 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=75b22961-954d-4701-baed-0df027dbdee3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:43Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=tekton-pipelines-remote-resolvers namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/StatefulSet/tekton-pipelines-remote-resolvers resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fde08dfe-405c-4476-b987-32aec111abe0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:45:43Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-remote-resolvers-0 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-remote-resolvers-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=beb6c913-7e9e-4b86-9926-fc43ce3958ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091cd2-2761-4525-83e8-f262ad73b3ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"582eec06-9e0e-4653-bafe-c7e135ae0604","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-05T06:45:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6b061282-0e6b-47c8-9ec2-8a7706102dc7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0022ac16-6b4f-4700-974f-ade28f0a6a77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f566d861-f703-4783-bfc4-a8af6da085cb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=772fade2-1022-4a16-b356-3de0124cf7d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=0292c110-9fb1-4a12-8cdf-08755f09de21 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=8f1f8a27-019e-457e-9617-c22d5fc466bb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=7535787f-85b1-4752-a17c-d2aed265e7af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=ba4f7993-67bd-4d83-8425-3eec083e7a31 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=71d157df-8ebd-4cfa-ac57-6f18c28af8c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9a0f384c-1ba6-4c50-b1f4-139a91dc570e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=da51c6ed-37b5-4c54-a6df-4ab37f4e4bd3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=63abf568-cd13-48df-8491-c31878ab9092 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=cdcfdcf1-4258-45b8-87ba-67374fd1aa1f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=780d6eb4-43e6-4f8e-a07e-e30688e4956d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=8875082e-629c-412e-8088-8617a1499d7f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=ffc0c13b-2389-4b24-9328-267f72407015 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=85cdf1a7-9a9f-42ae-84d6-fac10fb1bef9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:44Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=59c4b0c4-cbd8-4327-9367-b360b7347715 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=8c337c6b-367d-4ccd-aef3-ff0c01338384 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=26bfc8ff-c789-471f-8f23-f07c720e6f6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=856a2532-6cd4-4790-9327-09e7a7972176 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c9cbfe73-9481-43fb-a23f-40cf547f2561 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=4eedebdc-579b-40dd-8c93-7c1cd465c39d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=f44c6dd3-0a13-4645-928d-c9599b4205df user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=6f5ae6f3-716b-407c-b611-c6ea2c652017 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=aef119ba-ceb5-4872-8438-e61a7c298ad5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=923b3251-576f-4f98-a257-bc05f851a01d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=39e128bd-1c5e-452e-bc14-e4e7dce2e1e7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d6f71cb5-42c2-47b9-aa2e-0b083616c01a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=1b9d093d-4859-462f-b2b9-3bb617504d5f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=72c86745-b55b-4413-96f9-b8ee5797ab18 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=7114a496-7d65-4436-8043-f145491904d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=bfc9988f-6c7e-461a-bf0e-1e39020cdd71 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5067b49c-e771-4ac3-8135-3c54ea3ff036 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=66c90b3e-c835-4789-bc2a-145c5b904655 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=dba7e6c1-21b3-44da-81fd-5c7d6ef62821 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c1aae88c-edd5-431a-a816-aa5978d65302 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=f06c64fc-3e97-45e7-aa2b-c36fcc34ee2e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b96d7378-6656-47d4-b9c8-3253def8bf51 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=485b414e-f25d-4632-b920-f4055e5df179 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:48Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-remote-resolvers-1 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-remote-resolvers-1 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=50bf4b2a-25a8-444e-8eea-6d87188aea79 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091cd2-2761-4525-83e8-f262ad73b3ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"582eec06-9e0e-4653-bafe-c7e135ae0604","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=765a7660-7448-481b-9cf0-35111e804b1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=eb0e0ddb-ae72-441b-a3f5-3d1f8470819e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=621709a3-e096-4962-bc2d-a17a32e30b55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=cbb17e4b-ac43-4acb-bfc6-128a42f7872b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=755a3d04-6c65-419a-8c78-fa8b5d72b2ca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=3cd21866-f56f-49e3-9101-555194c71b51 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=748a32f7-f449-498f-9298-9130982e7a98 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f48c3284-fdd4-40c9-bb3d-f513eba03a28 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=3f022c48-0b7f-4b3b-8905-93e003d3e8e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6268cb06-eaa8-43cb-98fe-0dfd39f6ccdd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=ae0e5450-34fc-4855-9015-1b6a58d681a5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=962d5dff-5c16-4d9a-8218-05dcf78c5906 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e0d1d116-003a-4d1b-bb62-dae401207094 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=b073d9ad-f09c-4b3e-8ed6-c2e3c7f7eda2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=fbd93f63-8a6f-43ec-be27-1b960f0dddcc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=500766b6-3299-492e-8256-e2e8a75f581c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=ef43990c-95c9-488b-87a7-b78450e278a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=df3fab07-3a02-4ee9-9461-f9a252fba6c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=4607c7f9-6e41-4349-9a69-cf64f5f28ef1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=70cf8e88-4fe7-40ac-a049-44f90ecfd0fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=707a13f5-712b-4450-beca-5127fa764b2c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=03564070-4a65-43bf-8fea-c4dde3857d83 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d5e43586-0279-4aeb-ba07-ae107149080a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=acd97fe1-e49d-4e7e-b8e3-506c340e2bd4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=929af914-ab3d-4bda-ae5c-354b03adbfe7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=486adc0a-8d4b-4724-be8c-96abf77806b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=ba5ef799-ad59-406b-8572-eae9fd1fa2e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=3d85ff88-d6a6-494f-a5fb-bf4566ac6a6b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f167012a-2d08-4d32-86a5-4ffab43d9cea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=b3c15d4c-730d-432a-a62f-3b86affe7e0d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=5b97fbdf-3ff5-4da9-a80b-fe863e1cab23 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=f429f567-0bd7-4bc4-afbe-f5be1e29e7c0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=d069bcc1-c475-4c93-9ed2-6e2649ce8dac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=f13a8650-0260-441a-9276-7cde2b0565f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=4def81ba-9ca4-4994-a76d-571395b0f0bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=d335efae-4df9-427e-a773-3a78f9c7a6de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=4cafd73b-a375-4c1b-9527-73ec10ccbbd8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=4f45fbdc-c78e-4094-89aa-9d5404a10a78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=9832388e-cacf-4e7a-ad62-f2af97ef22f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=1028ef89-6a31-4dd0-85e6-6e79868a23a2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=1f5ebf84-1bae-4766-8d45-782af3e58482 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=2003e368-4e40-463a-a489-465cfef3fa2f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=069add8d-1852-4acf-8862-f573d24992f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=135db86b-ad2e-4d0e-86a3-7b5dc1a89e1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=787a0d7b-d7f4-4673-9417-3bc0c7446217 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=3da6728e-cf84-4800-8304-1fa12a5e6421 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=036d7832-222e-4a77-961c-3f5039061f06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=a15bb717-d78e-40ab-9aa1-cf6ff677859b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9d71e679-5487-4a3d-b04b-5db49af7804c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=7e9b1303-4a0e-4237-a5cf-1d092d893720 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=6a32e7bc-321c-448d-85b5-82ff1d1684b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=0499339f-3e15-4741-a98b-c2e16ac48007 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e5a428b2-9f7f-4058-8a23-19ca39366c17 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=83a63ab8-2d0d-4190-a79b-65d302aa029a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=124101ac-12c1-4348-ae84-1364f4a8eac8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=801f4b88-4297-48ab-9a74-7b53dc3cdbbe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=c31d4bd0-3bb6-4b52-8c9d-2c1f7f337078 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=bc7e77ac-eff4-4223-8ee0-0fd5a5f37ab4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=5c7daaf0-3c74-4a53-87c4-81a487200158 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=b264f79e-fcfd-41bf-89c5-b1325ab10713 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=4a83df78-0b79-4fb3-a94d-cea30bcd7766 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=aef02704-7de7-4237-9be2-f79352577586 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=93b1ae2d-f962-4641-aaa5-fe436983de4e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=23ebbdb6-d598-42a2-9d68-1412f5c20e07 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8cb20ada-b0c1-4f87-b9a7-801b2c93ce46 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=4854e38a-0a25-4951-a2d1-3199504b1736 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3eea7de3-3aa5-4309-ab6e-f15dc7c95902 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=0898f2e0-e476-4254-a211-d4df0e464dfe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=1a57d637-76f6-4986-b734-44171555cb74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=adcb8a48-3f57-4cb4-8b63-f5228019a1fb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=a8681641-a9d7-46cb-b199-8125fa0c8d62 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=155effd6-1429-4ac1-bd95-ec3d71408c1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=3b15bf41-64c6-4342-978b-a7c171b381cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=3c50be45-83c0-4552-8941-dd3d0efbd336 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=779db704-88c1-471a-a4b3-e5677ed5686a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d2c1af62-3911-4370-aba1-8d284d1480be user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=f1bef19c-a209-41cd-986e-6833e139a876 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0149bfc4-4ed1-4cb0-94b4-f6006b5b8d83 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=62e0a8cb-fa8c-43cc-b220-966124c73597 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=5a5a96e5-7363-4ea9-bc78-2f2899963ac4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=cfa8ea66-831d-4719-8bac-657fef52ce8e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:45:55Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=29b39989-cfba-4573-909d-aa4606f57294 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:07Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tekton-triggers-controller namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/tekton-triggers-controller resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=3cf05ac0-8427-47d3-9b3d-1351c8f18803 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:46:07Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-triggers-controller-844b8f748f-w9tlw namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-triggers-controller-844b8f748f-w9tlw resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a5b26dba-ed8c-40fc-af23-2b943a6f5b9b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:46:07Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tekton-triggers-webhook namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/tekton-triggers-webhook resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=eebb692e-80eb-4830-81e4-8f1b348152b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:46:07Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-triggers-webhook-5c877bc668-rtts7 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-triggers-webhook-5c877bc668-rtts7 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=99cb4ccf-d33a-4629-86c1-f966e68d6f87 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:46:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tekton-triggers-core-interceptors namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/tekton-triggers-core-interceptors resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f5b1c702-f50f-40d1-8a29-a6950088a9f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:46:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-triggers-core-interceptors-6f57d6b8bf-hr9wv namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-triggers-core-interceptors-6f57d6b8bf-hr9wv resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2c8e9407-5e5b-4047-a2fd-23b37860d7b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=37cfd835-a95b-48e6-93b7-eef43e83273e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6658577f-b700-4b25-8696-cce1b4488209 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=34a50eb0-5c22-4df4-ae2d-4b9dae496af5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=181fc04a-080d-4ad5-b03b-4fd96390f13e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=988588ef-e663-47ad-8a0c-32310db145e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=894fbad8-84d0-4a91-8206-1039037def28 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=c901978c-7efb-4692-a240-7eb94b291cbf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=fcac316b-0875-4df9-ab9a-d6db0e8bad1b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=57efbf19-f1b9-4593-9a8e-79341c4e719a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=e347d95d-6a7b-4a4d-8879-409ad2f82608 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=81258d00-c1f4-4f21-83de-fa104e7703a9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=cae9536c-5122-4387-a2a4-114f0efc2d44 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=b0334e73-86f6-43e2-b0ac-362e77082e98 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=415b3046-9d79-441d-880f-b36692fcfdb4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=a5945e7f-f585-4d17-b880-b6e6822ee118 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=781f0ead-f6cf-4bec-a7e0-d7b2dcbb3b2b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=20ca1d2e-5744-46a6-9dfb-55ec0c3d083b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=bc6d6448-f1fb-4da7-aeb9-204d0bfa7390 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5c28d083-5bf2-4f59-9691-51bdc408e441 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=7b57f0a1-d179-4ec4-bbd0-18ac34f1ab9c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=d4d0f696-98cb-415c-aa79-8f9c60738b20 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=c8468356-775a-47d1-910a-b5c3601c4b02 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6a87388f-ef16-4c71-9a2c-bc2e56a24d7d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=31f8fe44-2882-4f6f-aecb-57867101ee61 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=47f1eb7b-9fd3-4bd8-b91e-3d2244181fad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9fa059b0-76ce-4dab-946c-69ff261703b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=dc537161-be0f-4720-814e-a329b3fedf38 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=117dfbf5-c0f9-4d9d-b388-5a5d58a057c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f42faa2d-b41a-46c3-990f-1f7a8011e9b9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=fb77cad8-ff69-410f-b355-c2ab996871a6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ba5483dc-e5c8-4251-b2c5-c99d293eb9f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8b97d031-83de-4fc4-bf2a-e344c72ccc71 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=108ae483-9f1c-4f8e-9d1c-bf581703fe0c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=869a8318-f77b-496a-a3de-be4cd8a40c07 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=49a2356f-a061-4d38-9216-257361e0d7e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=54424aa1-dea1-475b-a080-625e1574d0e3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=f7c81a08-5c96-4a8e-8d01-16208b632837 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9817231d-5cea-4a65-a280-e6dc920a4e18 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=af662f66-e7d0-4a69-a2df-da52e560a010 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=7c32ac18-f385-4801-9b8e-75c38ddabf32 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=3a79b2a9-7b4e-499c-8879-efb703e942af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:23Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=653e4e3e-50e2-467f-9fe4-760781a02dac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tekton-chains-controller namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/tekton-chains-controller resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c6d71fbd-afdf-4276-8885-1f5c56e0edd5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:46:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-controller-85657fcf49-rqgng namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-controller-85657fcf49-rqgng resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=dd132e90-6533-468d-8233-a2298637ab05 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=c82bcae9-c193-45e4-bdfa-f7541512740a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=8769d41a-8d46-402d-a74c-62c6622b8f5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=b9a4fef0-0761-40b1-93a8-07378e643c8f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=63c9e6cc-d4c0-40e8-be0f-69ef2f2c57fb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=27e0348f-f3c0-4672-b683-f9d65158a7c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=d3064282-abb6-4cca-81f9-96a4f8b07783 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=0ade847e-895e-4497-913a-2c74a84b3402 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6e384c63-78f4-4982-a7d1-5cb2091256b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=df902dd9-8f0d-4e60-81aa-1a572d3c0eb2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=ddcfeb79-5a38-4cd0-bf9c-fdafeee37fa5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=550a8812-8de5-4475-a849-742df5d17e73 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=ce0a8f9a-9708-4c89-893e-383ca248d515 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=444941ba-468d-4296-9f24-3b862f562623 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=34971737-0180-41cc-b759-feee35148a67 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=ca09b710-c0a2-49d1-b2a2-9449110cd014 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=d3e904a5-5e40-4eb1-a105-93bc4b0e1190 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=afa6e865-3cf7-40bf-a3c4-a2561559b137 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=b561c3d2-6699-48ca-a3bd-255c6f67544e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=33839d98-f3ac-4154-b4c7-dc4c9bf21741 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=f656dd1c-ad81-40fe-8fc5-df435d89b38f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=78a99433-5f11-4df6-a8a6-7f8606687ea3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=53ad10f1-d1d0-4ef8-a436-7947dc65f750 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=86f43233-84ee-4938-8023-15c7e3d40bb2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=dc244b25-243a-4249-a3cb-6fc8b68cc59a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=eafb8fda-3035-481b-b85f-07b1827248ab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=ac57edcf-06df-428b-be8e-85e40c61fdcf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=5bcce2a9-731b-4ead-9249-372a12fce4db user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=a6efead9-4a90-4e0e-a8e3-c7be40b329ee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=90bdd188-3ce1-4cef-8b98-1570155c85be user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=61cb46ab-c7ff-4ffd-bf0f-8981ea679e7a v=2
2026-10-05T06:46:26Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=8286bc7b-c174-4d88-87f6-61de15753612 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=73a0d2ee-5971-4289-9263-7c226a77c04b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=987fed39-f548-4ad8-84a9-d03c1c295e4b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=9ef82c11-8dc7-4acf-887e-f8caae97b672 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=1a0cad15-c897-4ba1-ad36-2777fc0b849a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=20bd7d2c-7e35-4bc9-86d8-8d1e71f79663 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=8350e4a9-2e70-4b36-b34a-5cf159aac1c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=76c60a87-7507-47c5-a95b-f88aa42c1524 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e3bc8984-e8e7-494d-b01c-5945baa0c009 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=9572f0d9-e7da-430a-bcba-226c11839972 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=da6d42e0-c152-4518-adb6-281fcccd8da0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=9f011a81-52fa-4887-a004-4a375fae18a3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=3921bf88-ecc5-4662-8136-b93375995089 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=0a5c9d9c-5f4b-4664-828e-eeb0b3bc7154 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:28Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=f15a97bf-9f82-4d83-9c67-6b5604b6c7a1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:29Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=138aca38-fbcb-40b0-9e02-e793019b80d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=46423ec6-a2d5-4e6d-80bb-740493c1fd1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=faeaa343-c3d6-4eb4-85f6-beb9de6ef126 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=fa05a91f-ed4d-41e5-b9f1-799bfba8fd18 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=2dfe2cc0-5a90-4892-af12-7ce1b67519aa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=a3009140-a022-4902-9f88-3b1beebb7af2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=27840be3-463f-4b76-9cd3-ede7062c81ff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=ce7d9859-fccd-4996-9032-c019d31d2662 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=e3a23c5b-dfc3-47c6-8ed8-fb1c9d46517c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=6c3178b7-abb6-4598-9740-76113fb7996b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=709b654a-427c-4f9e-b92b-c8973311176f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=e44e993d-d630-440d-ad14-e5c77f179a1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=a01340d0-9266-4218-a542-c371abfba8a9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=a6ea0372-c75c-4aad-8701-2691734d88ee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:30Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=082cb7e1-2b4d-4560-832d-e4fc743af1d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tekton-results-api namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/tekton-results-api resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=93344d22-f914-4a20-acb4-8c8661126c7e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-results-api-fb777b98c-866gz namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-results-api-fb777b98c-866gz resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8a362652-15cc-4aa1-9f85-668f2989eca1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tekton-results-retention-policy-agent namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/tekton-results-retention-policy-agent resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=afaa8530-b09d-4511-ad3e-5ab08ed7d5f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tekton-results-watcher namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/tekton-results-watcher resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ef503eb0-496c-4947-a8e8-8bab5ec8d08d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-results-watcher-85cbb57557-6ljz2 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-results-watcher-85cbb57557-6ljz2 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=21eadfdf-9add-42d7-b77e-bbfd23a3da72 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=tekton-results-postgres namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/StatefulSet/tekton-results-postgres resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9bc39b1a-f70f-46c4-a0ad-e34fc674c024 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-results-postgres-0 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-results-postgres-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=116a36d8-a6c7-4f03-abae-2289bf3ba03e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091cd2-2761-4525-83e8-f262ad73b3ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"582eec06-9e0e-4653-bafe-c7e135ae0604","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=84815161-80e0-4979-9d84-a3981cc9220f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=25dc9453-8351-48e1-88c7-a60ebe29953f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a8d1b852-d908-491b-a38f-61be894ce4bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=e3e1f603-f697-4d20-bf05-bf051be601b4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3966952f-97dc-4d2f-a120-dbd88761dfd7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=753f5d13-a19a-4974-9f96-5c6ffc58b3b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=7b9e8936-030a-4ee9-be02-7952fd9c579a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e0e22693-2b4b-4226-bca8-d3a10b7a329d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8ac5b3bf-bb3a-4386-a11b-9ff9272f7e8e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=d48a96a1-b916-4a8a-a357-ca96efc1664b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:32Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=2ba7f432-1c3b-4939-b550-f668d00bc869 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:33Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=a96c5b28-505b-4727-ba36-1c572409037d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:33Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=50dac1a3-0ad6-4dc3-b2a7-e5faf8cc638e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:33Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=ed2fdc38-d070-4e8a-8470-e93dad70c271 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:33Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=4123a4ba-555f-4baa-862c-fba1abb46c16 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=1131bac6-127b-4534-9342-b231f0d9885e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=f478176c-a654-4155-ae5a-e7a25cf7d39f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8d9abe0b-6a7f-4dff-9cfe-a03a358e4e29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=5f182670-22ca-422d-ae84-717b6a398a3f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2c9e6271-807a-4c96-bd89-14380185753c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=fcfa899c-af2c-454b-8314-e3aba096a145 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=acb98342-e16d-4ed8-ac1d-596b0c869c47 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=cf6145da-e793-4a85-9bb4-28f09bce6d03 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=8a2e7f63-5c9e-4481-a04c-5d60f065353a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=e97eef45-e4eb-48b5-b092-594de981b1f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=9c1c780b-df9d-4ecf-8faa-16ea2701fbd0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=9cf07cef-b41c-411f-a92d-09b06f2d94c3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=54224904-0b8d-405c-b2fc-6885b4896069 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=9fea3cab-2b11-4911-a139-f350bc6c766c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=bc352752-9cdc-4ffe-b33e-b87e4d44124d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=ea071916-b43d-4d6f-9d8d-510670ac92a1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=ee318492-5ef5-4b96-a293-f2b99a0b533a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=efd0e240-befd-41f5-8cdb-37239c76ee3c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=d273ed02-7edb-4ea8-a83a-5e45932a0e36 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e7a3597a-2848-4f65-b03b-34edcbe4a7a6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=5706379b-94e4-482f-9842-a814b6bee519 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a9a9b435-bb7f-4475-b8c6-c9ca329f305d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=a9bd9a68-4408-4e53-a8a1-04a7bed35123 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=2320a469-6fb8-46a1-9d7d-5009f48b4f07 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=e367d6dc-b482-4c02-8742-3d6b13669aa8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=f9f2b58a-d961-4296-9564-213defe0c8f2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=6af062d9-71c8-49ef-b3ef-5346544197cd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=31c5507a-afc4-484d-a0ae-807f871b9ed8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=cfe274dd-fcbc-492b-88ad-c02677d1fad7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=54697f56-96e6-4729-a2ea-39ee58a5fb38 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:37Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=4977f1db-7a35-4043-9550-8ccc857d8d3e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=2e3eacb7-ddb5-4110-83c6-88fb3f96af74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=1b865e00-7cff-4c56-8dbb-eedb38ff7116 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=df363370-710b-4940-bb3b-400142c9179f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=c4393d87-54b3-4240-af61-e1ce1d7df5d4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=d8de7ed7-fb48-479e-a580-b051113e43ae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=5f8420fc-beeb-41a8-8d42-78ede314b40c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=73e1d828-abf0-4f72-8304-1c6012d52d3e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=6e3985e5-3c33-41a9-9054-7016933dc8bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=fd1793fe-8b2e-4585-b4c4-b9627ce296ca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=6304c0be-06f1-441a-81a3-529f1094e96b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=78423229-3c6a-4414-bc89-56219664d87a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=e8c76913-6bb1-49f1-afa6-52856eb8a4e5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=e29ed71e-1043-4a34-9a0c-1753987b7a19 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=b88bd571-c46c-424e-89ed-04ac8c3b2a76 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c5ae8fd8-d717-464f-ab57-bfbabf572d94 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=67ec151a-e1c6-4043-b012-ec665838df13 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=3445a567-dc22-456b-9362-179dc1f4a9b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=97ef2bb3-7534-4ec5-8bd6-fd4f55e6434e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=6ad1468f-3bd4-4a6a-8faa-68d2f8984c4b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=ada31022-3fa2-48a6-bfd0-b5d5c8d0f805 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=a18029b0-5ee8-4fa7-b9b8-ab956c6d8f2e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=24facb49-ef94-4da1-b7b1-dc0dd53c7e1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=11e90b82-e587-4df2-9bbb-10d7b7bac7ad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=a7334adb-54e8-4dd2-971a-b120f778d482 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=ff8238c9-1d7b-4155-a160-737a213de0b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=f8fb42fb-6403-49fc-89a2-37fdc59f0d1c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=ca479c15-977c-443c-8223-fd8bdfe0dc80 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=26cf68ff-872a-4f22-912c-9851a892c6c0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=fcae5992-e1a0-4711-85b4-779819e52fbd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=001a5737-f44e-4584-b7ff-a0ee7501ae6e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e8267074-a5b7-4f71-bf99-2621b1e18b29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=fc5b903f-8e30-454f-9ceb-5935ac07daa7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=0ca7482a-abfa-435f-87f6-ef2b193f8acd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=366d2a46-b866-4102-a81c-69068671c1a0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=20e07437-12f4-4d54-b413-434ff0b9ca6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=431bfd7a-54c6-4933-b190-ddc55de15a82 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=5bac58ae-6681-441f-b617-c75eea589014 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=4cf1858a-2a1b-4a7d-9124-73c2c6100844 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=62e6f6ad-b3a8-4a87-b9c5-323fb211c3b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=ecc1006f-04c7-43f0-90a1-ce56061f4a38 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=7bc09d7e-18a6-4d6b-b6c1-5a2583b078b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=09e47d05-700b-4641-b738-78c54a6b2d39 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=602d8ddf-4fa9-46e8-94ef-89b277f9854f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:46:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=d7d6f738-1df8-4287-be2f-2fe293082c2f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:47:09Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=tkn-cli-serve namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/tkn-cli-serve resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f682a244-fe50-440f-930c-215a00eb7acf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:47:09Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tkn-cli-serve-84d9964f8f-sxsg7 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tkn-cli-serve-84d9964f8f-sxsg7 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f6c3cf56-285e-4b60-a1ef-8ef2c96ddb5d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:47:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=pipelines-as-code-controller namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/pipelines-as-code-controller resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=dd55e864-6a28-43d1-89c6-276ed4c24d04 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:47:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-as-code-controller-5ff5fcb6dd-4rldv namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/pipelines-as-code-controller-5ff5fcb6dd-4rldv resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9bf6721c-1754-41cf-a56c-9fc10b95572c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:47:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=pipelines-as-code-watcher namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/pipelines-as-code-watcher resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b14dd9e4-fb0b-47c0-8418-d4ed33ad8756 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:47:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-as-code-watcher-64b64894d4-s9854 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/pipelines-as-code-watcher-64b64894d4-s9854 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5940d2b2-dc8a-4ba5-b525-e786317e059a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:47:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=pipelines-as-code-webhook namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/pipelines-as-code-webhook resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b3686ba0-537d-4ec4-89d5-3ce1271c0874 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:47:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-as-code-watcher-64b64894d4-p9ccj namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/pipelines-as-code-watcher-64b64894d4-p9ccj resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e527b6ed-9ce8-4d88-8318-a12aa6d59966 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:47:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-as-code-webhook-54d44466cc-sltc9 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/pipelines-as-code-webhook-54d44466cc-sltc9 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e5c4521e-5111-4f72-bf62-4d9dfaef1330 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:47:33Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-as-code-webhook-54d44466cc-68ml8 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/pipelines-as-code-webhook-54d44466cc-68ml8 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=47183b72-626f-416a-a33b-a4f0788ef8f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:47:49Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","openshift-pipelines-oper-7UwBkFB0e97AxDJOCdMhYqWILky1LQa6iRCQz1","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=pipelines-console-plugin namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Deployment/pipelines-console-plugin resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:openshift-pipelines-operator-rh.v5.0.5-871","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c8d76bec-9b6f-412f-895b-b1e9e7e2f89f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=08fe0d60-a7dd-436b-9d1e-14309ff7da00"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-pipelines-operator-6b85fc6bdb-hb7zg"],"authentication.kubernetes.io/pod-uid":["1345e511-4ee9-4ed6-a042-fe2d3fb20bdb"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-operators","system:authenticated"],"uid":"68c3c83b-aeda-454b-a3a7-abdb8a461221","username":"system:serviceaccount:openshift-operators:openshift-pipelines-operator"} v=2
2026-10-05T06:47:49Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-console-plugin-cf8bfc499-rs48d namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/pipelines-console-plugin-cf8bfc499-rs48d resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=da1f216a-71df-4279-bb25-5457bf0bb10f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:48:10Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-jl294 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-jl294 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=50844a40-6dcb-4707-aac0-719dac2f23b3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:49:28Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-9716d9ad4e namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/StatefulSet/affinity-assistant-9716d9ad4e resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a54951d9-63c3-40bf-a824-20b210a4d4b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:49:28Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-9716d9ad4e-0 namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/affinity-assistant-9716d9ad4e-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a9706636-b179-4bcb-8fc4-e153d810fe06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091cd2-2761-4525-83e8-f262ad73b3ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"582eec06-9e0e-4653-bafe-c7e135ae0604","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-05T06:49:28Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-xqfrowgrtb-init-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/buildah-demo-xqfrowgrtb-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=dba94ea2-301d-4b99-beb0-8381d1ddbaa6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:49:42Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-xqfrowgrtb-clone-repository-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/buildah-demo-xqfrowgrtb-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c605f467-5b8d-428c-98d8-9541e078c104 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29853050 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29853050 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=80cf4f88-6505-47cf-91af-6d2d66d9bf56 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ce5d8f8b-cb79-41c7-9dfe-7ce86d19c82d"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ff99a349-861e-40b3-a80f-90e82defd079","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-05T06:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29853050 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29853050 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=cda2df17-3fc1-4113-919c-87e127a35f06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ce5d8f8b-cb79-41c7-9dfe-7ce86d19c82d"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ff99a349-861e-40b3-a80f-90e82defd079","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-05T06:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29853050-qv9m6 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29853050-qv9m6 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=850e36aa-2c8a-4914-9a75-8ee863ba8de4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b77efa88-5b1d-495c-8503-b7de7c9be012"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"5cf75a79-cd10-4cb5-85bc-a0baeb1d3a08","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-05T06:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29853050-s9qdr namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29853050-s9qdr resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b80a7862-b65f-48b7-8b9d-44e6d19a40b8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b77efa88-5b1d-495c-8503-b7de7c9be012"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"5cf75a79-cd10-4cb5-85bc-a0baeb1d3a08","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-05T06:50:08Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-xqfrowgrtb-prefetch-dependencies-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=3fde8028-9150-4151-a8d5-85a32d1decdc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:50:08Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-xqfrowgrtb-prefetch-dependencies-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=b757e654-203c-4c96-996c-a9b681981238 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:50:08Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-xqfrowgrtb-prefetch-dependencies-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/buildah-demo-xqfrowgrtb-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9830f49f-736b-42b8-a424-e3d230164367 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:50:24Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-xqfrowgrtb-build-container-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/buildah-demo-xqfrowgrtb-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7336f34f-a13c-4436-94f4-4c3c8d163f5f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:50:25Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-zv6ld namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-zv6ld resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fed145ce-0472-46ca-ac57-61da20429382 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=f52fdcd8-bcfe-4f3f-a021-0ab68af84b29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=2c36804b-447f-46fd-82d2-cedb9382fced user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=a18e3c5f-cf92-4bc8-a8f2-226f7f0ed104 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=45f405f0-6266-418c-9205-2956fe010c14 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=0550cfa0-da54-490e-b08e-e544d2983080 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=1e9fbe96-5a8b-46bf-a367-331298637dc8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=c11085f9-2e2a-4ee9-b160-5c4223e532c4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=a72214fe-8e1d-4fbf-8d79-e87bf3136ca6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=98539956-1208-4aac-a6ea-0fa20084e187 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=74a5f544-ce8a-4dc4-adce-f99b473c047e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=2d56dbdc-f3d5-40f7-a012-be4765d9e9a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=debfc746-b68e-417d-852e-c8165c518e63 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=46e2f1cb-7cd2-442d-a56c-8f581dc1f128 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=71928fd4-6422-499a-bcbe-a8466648c4f1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:50:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=984ef9e1-e1f7-408f-b232-46d1fcf3f95f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:52:34Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-xqfrowgrtb-build-image-index-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/buildah-demo-xqfrowgrtb-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=edbdb40d-7131-458d-b927-f29c8437a2f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:53:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-xqfrowgrtb-apply-tags-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/buildah-demo-xqfrowgrtb-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=70794179-45ec-4f12-bd6e-c9f32839f510 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:53:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-xqfrowgrtb-push-dockerfile-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/buildah-demo-xqfrowgrtb-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2bd970a5-8dc2-4fae-9dd0-922eae1aee2e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:53:37Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-26ec45c0cb560c9948f7afbd97ea76a5-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=412f9ca7-3273-4b40-89b9-6a709d219094 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:53:38Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-26ec45c0cb560c9948f7afbd97ea76a5-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c2401cb7-852d-48d9-9065-54e9c65e9568 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:53:38Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-26ec45c0cb560c9948f7afbd97ea76a5-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-26ec45c0cb560c9948f7afbd97ea76a5-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d9cd77a3-38dd-4ec8-abb2-dae267870193 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:53:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-nwzt7 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-nwzt7 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=89a35b2e-00b5-49c9-8ccd-709235715c81 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:53:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=31118a1b-d6f1-4293-be4f-2f7c8a60826c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=c5c853ce-f626-4bd6-b587-93b52fcf6780 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=d1db1fd1-6a96-4826-8082-fd8450da8b2e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=b148dd89-199c-4a73-abf9-9d59305dd662 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=9ea6866c-bc6d-470b-b45b-e98e4286cce8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=58fdf12c-a089-4281-b479-f2e435a9bece user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=946b90af-59b2-4c03-bde0-9147b83e48a1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=d5bc04b9-b5d3-42aa-a1d8-56c57c076008 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=1af90207-5e93-497e-8377-05079618828d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=9d6a529f-2547-4ad6-a7a1-94c09b2b413d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=6ad6e8b0-71db-42ab-b754-add5e353f2f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=de52c534-e22d-42c2-9719-42a09d61e8e7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=8ed6eda2-5329-4546-b2a5-b20d768e0c5b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=4809111c-537c-4ad7-b947-3b2fcdce52af user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:53:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=430fadd4-f614-4e68-a5e2-531d97754eff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=02dea9cb-956f-4614-9f7a-ab9504164bec"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ad93ec91-f99e-45a5-9461-73720e665042"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"d5f543e2-61be-42d1-a995-f955eee4dc71","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T06:54:00Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-a4981de329696f44bafcf6d0a3628e2e-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=c2eed9f0-e836-49ab-a464-7b32c53e1f1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:00Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-a4981de329696f44bafcf6d0a3628e2e-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=0c206d1a-2631-48af-b1db-7d286dccaafd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-a4981de329696f44bafcf6d0a3628e2e-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-a4981de329696f44bafcf6d0a3628e2e-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8349e70c-2254-435c-8dcf-c2fa1e250053 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:14Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-c03b3d235782ace5949f12d0239a704d-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=508064bb-9d72-42dc-8b04-00e6dc0f8ddd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:14Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-c03b3d235782ace5949f12d0239a704d-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=8e09f7a5-2e47-490d-878a-c13ea730138b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:14Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-c03b3d235782ace5949f12d0239a704d-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-c03b3d235782ace5949f12d0239a704d-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=71845230-dcc7-4f7c-b270-a9563571b6b5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:26Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-kcpbl namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-kcpbl resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=68c19201-410d-4bc0-9ea7-7f973f8de9e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=09966788-e2e3-4a02-b261-88591c7143c9"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"3bb2c1fb-5bdc-45c1-b415-8ae16a0106df","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-05T06:54:29Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-d4126daddf7cfa31b4b5e7ef916e75ff-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=d63559e8-dc5a-459b-a389-edb19420bae5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:29Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-d4126daddf7cfa31b4b5e7ef916e75ff-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=495dc1c8-c7d5-4bd5-b365-bc20a5e09271 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:29Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-d4126daddf7cfa31b4b5e7ef916e75ff-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-d4126daddf7cfa31b4b5e7ef916e75ff-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6f0e8fdd-571f-4f6e-aa87-eef82084f2f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:40Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-6fd268b1e38864af627b35b48c0b67ff-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f7668f89-828d-4471-ae86-366a8ef05b75 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:40Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-6fd268b1e38864af627b35b48c0b67ff-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=74aadc75-1c09-4c21-90bb-27839f316553 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:54:40Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-6fd268b1e38864af627b35b48c0b67ff-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-6fd268b1e38864af627b35b48c0b67ff-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f4cbd312-805b-4645-93e3-5f9417cc5145 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29853055 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29853055 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=55a5f158-e7f4-428c-81bc-7833f8e7a687 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ce5d8f8b-cb79-41c7-9dfe-7ce86d19c82d"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ff99a349-861e-40b3-a80f-90e82defd079","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-05T06:55:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29853055-f8g9p namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29853055-f8g9p resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b42ba899-ed07-4451-816f-e02a0c109f3a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b77efa88-5b1d-495c-8503-b7de7c9be012"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"5cf75a79-cd10-4cb5-85bc-a0baeb1d3a08","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-05T06:55:03Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-dd41e5c2df800080089e1a723b86d76b-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=453aae27-6875-44cf-80ff-6d4fe159ed01 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:03Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-dd41e5c2df800080089e1a723b86d76b-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=b467e8bc-bec0-4f3b-aa6e-a2480b4e152c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:03Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-dd41e5c2df800080089e1a723b86d76b-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-dd41e5c2df800080089e1a723b86d76b-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2834f233-f7f8-4206-abc1-b69f2ff14592 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:23Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0bac319f9687395b931dcbedba888124-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a606a749-78c9-435a-ab88-d0a6f132eebc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:23Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0bac319f9687395b931dcbedba888124-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=7ca6406b-67c6-4c03-9ad9-760422387aad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:23Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-0bac319f9687395b931dcbedba888124-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-0bac319f9687395b931dcbedba888124-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6266038d-58ae-4fce-a56f-d8a96b3bf6f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:49Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-f73253a8328011c6124c578737b0eb3c-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=75a896a6-f9ca-430d-9ae9-b326d130e11d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:49Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-f73253a8328011c6124c578737b0eb3c-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=290ce1e4-3144-4dd7-802b-4ced2d96eb74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:55:50Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-f73253a8328011c6124c578737b0eb3c-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-f73253a8328011c6124c578737b0eb3c-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d05ae22c-626c-4bfc-a257-f4efd7ccb7d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=29e790c8-bcf9-48b6-9302-626c41ee8da9"],"authentication.kubernetes.io/node-name":["ip-10-0-162-134.ec2.internal"],"authentication.kubernetes.io/node-uid":["4a1ad4bc-26fd-41df-a8f8-7fc867ed4529"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["6adab7ba-d50b-4643-85cb-21980e7409fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:56:05Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0484571b62d68b312eaabb8eab72cb55-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=eeacf47f-d94b-48ac-9306-23db515e96f2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:56:06Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-0484571b62d68b312eaabb8eab72cb55-pod namespace=chains-e2e-lgwn operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=9c50ac9b-eec5-4499-b2c3-5df9e92167a4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-05T06:56:06Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-0484571b62d68b312eaabb8eab72cb55-pod namespace=chains-e2e-lgwn operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-lgwn/Pod/verify-enterprise-contract-0484571b62d68b312eaabb8eab72cb55-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=3d7d8e72-ce2e-4f75-a7f3-04eeb4b5b9fe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d06ac29c-4d9f-4c50-86f3-c5746f059da9"],"authentication.kubernetes.io/node-name":["ip-10-0-139-11.ec2.internal"],"authentication.kubernetes.io/node-uid":["37e9f3ae-2594-4dd0-8ff7-c41eeae7dad3"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["91b54e30-aa03-4948-b2d0-62a9b409385a"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"50430e11-968d-41b2-b93a-663231f9f71c","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2