2026-09-30T02:00:11Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.5
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-09-30T02:00:11Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-09-30T02:00:11Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-09-30T02:00:11Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-09-30T02:00:11Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-09-30T02:00:11Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-09-30T02:00:11Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-09-30T02:00:11Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-09-30T02:00:11Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-09-30T02:00:11Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-09-30T02:00:12Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-09-30T02:00:12Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-576ff55549-wggjw logger=setup/leader-election v=2
2026-09-30T02:00:12Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-09-30T02:00:12Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-09-30T02:00:12Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-09-30T02:00:12Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-09-30T02:00:12Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-09-30T02:00:12Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-09-30T02:00:12Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-09-30T02:00:12Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-09-30T02:00:12Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=5792adc4-5093-4549-ae95-863cfbe96a56 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=1405e2a4-1efc-4f3b-b671-1c0ac6e564f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=7ee172a0-f328-4e45-9528-b4abf4d3d817 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=a20f65a0-ad9c-43e5-829a-f3590784f087 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=cd1baf81-47b4-4db4-bdd1-b307d5f18963 v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=6da356de-49a0-4260-bf68-9f7cc61a264f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=98261f69-8819-47d2-9e0e-f4efd26377f1 v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=5abd3157-803f-4930-ae27-e617c344959f v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=b4e31b15-f776-4758-a529-21affa17bbe7 v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=77072a7c-307f-4f9a-aa14-24eb249dad63 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=07f93169-fa1e-44e7-8b72-cc83fa8aabd9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=c7f6a7e5-45a9-41d5-a6e2-9b9f10423761 v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=9448fe7c-ec42-4c3c-a9f8-8b2371ea8248 v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=94ab9dc5-af08-4629-94c0-a3c207fa00f2 v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=c017d66c-5f9d-4ae3-bba7-963b36005627 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=537088da-5c6f-41c6-8141-ccad080eef4e v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=b378cf31-407d-4f87-92c7-d34ede8e61a6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=d81ce9ed-852a-4933-9058-8dbd72ccd84c v=2
2026-09-30T02:04:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=de367d7e-dde0-4abe-b022-480439415470 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=002905fd-0101-436e-abe5-6ae06e9bcf64 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=f989e394-55b1-4d14-9990-4d586986f0dc v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=84dc7430-c96a-4384-a4be-416791eb77a0 v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-09-30T02:04:49Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-09-30T02:04:49Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e9fc49f2-e57a-45c3-8f45-c69fb892be5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=062a4b72-168c-4e81-8f83-c58513f66664 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=3296a146-c5c7-4349-a999-b6701a8ea38c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=1f02499c-d1d6-401b-81be-abc569737be4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=5576a42a-227a-4f08-a6da-09803ee327d2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=beee300c-6dc6-4095-9218-9fad5a8e6327 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=e5545c49-98f8-4f6f-bb6c-a82dd8210161 v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=9d7c623e-73a5-4799-b684-fbf47dae5adc v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=c4ce2eb9-cf3c-4220-ba99-90d2b7b897ac v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=b0a597a0-5c51-4f6e-9a76-ac6ce5a316f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-09-30T02:04:49Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=bfe8d1f8-75a1-4af9-88fd-c8c5fe69c9da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=f18eef3a-792c-4f2f-8eb3-2f3b2db3d147 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f3c37540-57da-47c1-a7b0-7f24f9d4138d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e18d743a-af0a-4f14-a692-60e8234d23e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=80de5266-1989-4df1-852e-c3fb60572b05 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=be91d714-402f-42c4-b176-9594515ec0d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=efc7fe30-f72a-429d-88d1-ace7e99051c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=f0964311-6d6c-4022-8343-9941e787590a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=56b55176-440c-41fa-9944-fa4547236e84 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=86d5d743-55be-4661-94e2-8751245b04d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=ae7de6c9-432b-4d9f-a67d-cf74c7e150ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=4efd2b64-f507-48e5-9a4c-5e6b4c22dffd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=ce8f82c3-8311-4ac4-af87-0182bb2ec8c2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=85c91809-3084-414e-9d4e-19b13c7df604 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=b5f95708-4759-442b-8c65-8ccec7cbcefc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=60b31491-6346-460a-adc1-2684a8c7478b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=c459ed14-0f42-4902-bc11-c13e9441fa53 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=6fc94eea-5c40-42a9-87f5-4de5f24e4bf2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8d90d061-8c6c-494c-877d-a07015e17e8e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=83abc962-5533-4745-891e-157ee78d5469 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=795b2d3e-b73a-498f-92a2-2cca38800682 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-wlp9z namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-wlp9z resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6d1ee2ba-fa0c-44dd-991b-8ec19a6c5005 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d0f669d-5b16-454a-b69e-fcd5155f140e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"24f11e79-e70e-413e-a171-1c34a297d337","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:04:50Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-wj67g namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-wj67g resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a78a8eba-af9e-43a7-ba39-7fc875c3dc39 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d0f669d-5b16-454a-b69e-fcd5155f140e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"24f11e79-e70e-413e-a171-1c34a297d337","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=09aec0ac-743a-4d1c-bb1f-829cecf9184e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=7da154da-555d-4be6-bdf6-0236924a7300 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=5882aaae-c417-4e56-9240-e27fcb564e2f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=b4e48b9a-cced-4791-8c67-6e37838d4624 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=30d9e087-32df-46fd-b88c-038d8b90a186 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=a5d04948-2788-44f9-bad7-438173812346 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=6a1bb02f-60e5-4dd5-b861-13e1f3f2176b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=7e50a002-7570-40f2-bfe7-4b5bbf1fdee0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=64e47dcc-bede-44b3-8f26-915f34f4bb16 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=722b5a55-fb28-45aa-bcfa-69f65b656c4d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=97712d6f-9560-4a08-92d2-b9b9ad4c498c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=90f41c25-3376-4a51-90ec-a7321b087dd5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=ae41927e-9f81-4c63-aaed-2cb5e6c75cda user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=1a3ff01b-6ded-4f2a-a07c-4949e3ca0629 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=76f68f1f-993b-44df-8c0a-76f3187cf5e3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=21de579c-181f-4934-b4d0-bade9399b278 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=949232c0-5478-4324-939b-74426d465564 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=8f35e715-c255-4b1d-af4a-2b0f3d8bfe8b v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=8f3ef462-3e99-4d24-9dc8-7bcbbd78e378 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=6e72d20b-14b8-464a-92f0-f8ec79ec2879 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=35bd8e70-382c-4b44-837d-236df9aec6be user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=b84411e6-3d75-4d0f-b554-0924055d4067 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=d84dffde-8d88-4ed1-9abc-44a4ef30a23c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=0b4b4319-833b-4d29-af25-89467e456b15 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6d5264c4-28ee-4b75-ae58-e22551a3c14a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f9359fce-5aca-426e-b91d-938784e01d6c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2c613c7c-03eb-4eb0-b27a-58c00ced6234 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=d4cf696a-193c-4d79-bad7-8c3296cbfd60 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=725d692f-47cc-42a5-9647-4a39f1e3a14d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=e2d2dbfa-f961-4047-909a-e65dda9c9abf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e278a590-3a99-4baf-ba6c-f73b111f7feb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=39fa823a-009f-4b07-8fdc-3f3800ed32f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=715e0a77-4bc4-4a50-be77-01d19d83de9b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=85eff1e7-9ed2-434b-9e91-5670e1a6d49d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=04caf1aa-8136-4a28-ad44-4be3c338003e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=03baa071-e6a1-40fe-a5d9-d74f0097fd64 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=dc69dacb-145e-4989-b3c8-2607915c1189 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=c1278551-bebc-4033-8e3d-9487f966c2ac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c61f65be-c17d-4b21-af6a-11eceb965b0b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=92f721ad-4aaf-4646-974d-d29b36acd9f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=2b111482-2e9e-4e53-a7ea-cf632d588e7d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=8e92d621-6baf-4cc6-b6c8-e29aed5368f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=c82a10bc-55f8-4573-ace5-b3901f5bcfc7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=555b6848-680b-4c39-89e7-a9e6e34f2e02 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:04:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=8f165c7b-06de-4e29-a2a7-a8d3cd2b4641 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:05:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29845565 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29845565 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6bc34946-8af7-4d4d-980b-31ffa9f24ba3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f380fead-3758-4095-a756-f8f7520af662"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"5c4de4c8-edc7-4e69-adf9-c486e5a88857","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-09-30T02:05:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29845565-nxmwr namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29845565-nxmwr resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=0e353107-654c-4f15-b814-72b10a0b7f5e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d0f669d-5b16-454a-b69e-fcd5155f140e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"24f11e79-e70e-413e-a171-1c34a297d337","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:07:46Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-e07ca0718a namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/StatefulSet/affinity-assistant-e07ca0718a resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=84dab0ad-e593-4e2a-8c96-9b1d108c4b97 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:07:46Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-e07ca0718a-0 namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/affinity-assistant-e07ca0718a-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=20a864b2-8fbd-4e5e-bd84-678532040562 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=9a5838c0-2cc9-45f4-9a82-b0d419149548"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"d9ad048f-f37f-4076-b465-664bef021767","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-09-30T02:07:46Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-aiwzjzhlno-init-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/buildah-demo-aiwzjzhlno-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9569a79f-928a-4e5d-8774-78f99a97d647 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:08:03Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-qr2hw namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-qr2hw resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c9cb8fb7-15e9-47bb-be3c-13e849de2008 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=05657485-0ed3-4efb-aaf4-cd1ee425eac6"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"da608ddc-9309-4956-88f1-b42f83a9f457","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-09-30T02:08:04Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-aiwzjzhlno-clone-repository-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/buildah-demo-aiwzjzhlno-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=63990b1b-8234-4a73-93ec-c7a2c074a817 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:08:26Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-aiwzjzhlno-prefetch-dependencies-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=189a8126-a66b-4aee-b036-ae8845fbae0d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:08:26Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-aiwzjzhlno-prefetch-dependencies-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f3fa6cca-8fe3-48f1-b191-1acac30cd286 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:08:26Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-aiwzjzhlno-prefetch-dependencies-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/buildah-demo-aiwzjzhlno-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c76cb807-1f80-4118-ad65-a183db85831e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=24e1580f-23a8-48ff-a061-8df3b5884d30 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=32ab731c-a640-4847-ac8d-a320d9899dbe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=f649dc89-46fd-496d-96bd-4082ff00ae06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=b5a889c1-82fe-4496-8d65-5f30f7b0f545 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=fdbf95d2-60b1-407a-88b2-53b679a9e519 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=c3409151-20aa-4f2c-adfe-25422f594720 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=eaf637fa-1fb7-4dd8-a55a-bbaac3c368ff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=8f10ea7c-cb29-4440-ba17-1b9ded5d8d1b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=7a5b6f52-59d8-41ea-b8eb-96a1c8a641cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=aaf282d7-cbb3-4704-9e4b-c7d57d7ca10b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=b7621622-e25d-42c3-a096-56da68305032 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=0f262fc4-50da-4589-811a-63ec3fa9e36c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b8d65a35-1466-40cd-a5f6-c8aade7149cb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=fcd4a787-6986-458a-9e03-03ef9b98386b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=76e7a455-d49e-4e97-a814-0f7e7fe30f66 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:08:43Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-aiwzjzhlno-build-container-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/buildah-demo-aiwzjzhlno-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7d6e4916-af0b-453a-b02e-66d27e37c5d0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:08:48Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-xbqww namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-xbqww resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=0229da3e-b4fc-4d0a-bb63-9ccfdd5505c3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=05657485-0ed3-4efb-aaf4-cd1ee425eac6"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"da608ddc-9309-4956-88f1-b42f83a9f457","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-09-30T02:10:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29845570 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29845570 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ba6e0609-fb58-4a55-8aab-d37da0f7d328 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f380fead-3758-4095-a756-f8f7520af662"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"5c4de4c8-edc7-4e69-adf9-c486e5a88857","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-09-30T02:10:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29845570 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29845570 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=113541c0-be6c-472f-8cf6-780d8891d9e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=f380fead-3758-4095-a756-f8f7520af662"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"5c4de4c8-edc7-4e69-adf9-c486e5a88857","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-09-30T02:10:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29845570-62rw9 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29845570-62rw9 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ac13a794-efe0-43ae-8f34-d21fcb9b3462 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d0f669d-5b16-454a-b69e-fcd5155f140e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"24f11e79-e70e-413e-a171-1c34a297d337","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:10:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29845570-pznl8 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29845570-pznl8 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e00ca205-0f5c-4fa6-8396-d9d1f4c80009 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d0f669d-5b16-454a-b69e-fcd5155f140e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"24f11e79-e70e-413e-a171-1c34a297d337","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-09-30T02:10:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-aiwzjzhlno-build-image-index-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/buildah-demo-aiwzjzhlno-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=63e6048f-7986-41ed-887a-2994f4cf1755 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:11:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a8c57b7b-46e6-41d7-9581-89aa51d1dd8d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=293ac8e9-2925-44ba-b4fd-cce31c91eb7f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=84c41f13-56cd-4c9d-96a7-fefe67ea8de7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=e2958a61-a539-482c-88ed-1eeed0f3cb4a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=db6b9256-b6d0-42a0-91ee-6f4a3cbff9dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=5c73e587-2007-4b7d-b16e-a23211da7b52 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=25105d50-292c-4d66-b2b8-862421a5787f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e6951338-dc33-4ac1-8761-b6ebcb34bf8a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=b3670153-3f4b-4e6e-9cc7-9db45f1f7232 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=a885958a-a27a-4a18-89e3-6890556c3624 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=5b57da22-af7a-4593-898b-2e810c1a4aac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=95741243-0916-4c9d-ba08-ade69787c3cd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=67b08fa6-df3b-4ff9-a6a2-b29be0335f4d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=2f542e0e-43a7-4632-a316-455000fe3005 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:36Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=07f8f8df-49b8-4394-8982-3e685c9a7be2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:11:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-aiwzjzhlno-apply-tags-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/buildah-demo-aiwzjzhlno-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5fa82022-aa82-441e-b4c5-961db788679b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:11:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-aiwzjzhlno-push-dockerfile-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/buildah-demo-aiwzjzhlno-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c012b6eb-0fd5-4e38-816c-aebd74874f14 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-8dd97f22d7f97addaf5b8208c021d8c0-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=074f9de2-d71e-4b13-97e5-162b5690c3bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-8dd97f22d7f97addaf5b8208c021d8c0-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=0873c6fd-c45e-476d-8968-8b3b8bbbcfce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:11:52Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-8dd97f22d7f97addaf5b8208c021d8c0-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-8dd97f22d7f97addaf5b8208c021d8c0-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8838cfdf-c3ab-4db3-8b9d-c70a3ebe1192 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:04Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-dlnxd namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-dlnxd resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7b40bd14-92f9-46a2-ab07-fd10cd68437d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=05657485-0ed3-4efb-aaf4-cd1ee425eac6"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"da608ddc-9309-4956-88f1-b42f83a9f457","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-09-30T02:12:17Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-5b014f1aa234227dff034a003eda10bb-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=4bca3655-1461-4492-bcaa-baaa1019216d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:17Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-5b014f1aa234227dff034a003eda10bb-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=b127875b-eb45-4d72-aea1-f27d884031b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:17Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-5b014f1aa234227dff034a003eda10bb-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-5b014f1aa234227dff034a003eda10bb-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=94d6f3f1-4c59-4ce8-9242-a0674b10d3d3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:31Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e8e9b66c26e80698a99d8640c3c73869-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a1cc32d3-37da-4fb1-ab7e-84fc8c56c979 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:31Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-e8e9b66c26e80698a99d8640c3c73869-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f0279492-0fdc-4f85-8cc2-3aebf593f9e0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-e8e9b66c26e80698a99d8640c3c73869-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-e8e9b66c26e80698a99d8640c3c73869-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=42d9e54c-4909-427c-a234-7e9428884c87 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:44Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4e6921b87d9acc81ed52ba6e566b3604-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=cb070d27-8f83-410d-9f7a-323a1eca1376 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:44Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4e6921b87d9acc81ed52ba6e566b3604-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=9ae0d0c8-6862-4f76-98d8-a6902a47ad7b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:44Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-4e6921b87d9acc81ed52ba6e566b3604-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-4e6921b87d9acc81ed52ba6e566b3604-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c233e11a-238b-4ea8-aeef-c230cef08ec4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:56Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b6dcad4191b69439d755d6b215e10d29-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=5df9456c-7f0a-4291-b719-977076028ff3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:56Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b6dcad4191b69439d755d6b215e10d29-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=502015c6-6b45-45af-aa9f-09292ceaf699 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:12:56Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-b6dcad4191b69439d755d6b215e10d29-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-b6dcad4191b69439d755d6b215e10d29-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f2ca6ad6-1aab-4484-b37a-3642ed7f6ecf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:10Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-dc95d9f78213b8acd801db9dc12844bd-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=021ded09-9d20-4c54-9081-76d420d2ebc5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:10Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-dc95d9f78213b8acd801db9dc12844bd-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=01887cba-7b3d-426c-a4e1-327e8ef08db9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:10Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-dc95d9f78213b8acd801db9dc12844bd-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-dc95d9f78213b8acd801db9dc12844bd-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=63c29bb2-227f-4ec3-a407-4ae2bb21e49e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=bd63c633-2637-49ee-ab44-0ddc2a584eee"],"authentication.kubernetes.io/node-name":["ip-10-0-164-82.ec2.internal"],"authentication.kubernetes.io/node-uid":["59616293-caf0-419c-b608-1d15551f1583"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["effeb17c-71e7-458e-9256-3e5b991a0083"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:30Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-cf8d774c5cf573d7152d959ec5219b60-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ea3044aa-6506-4446-9242-96c6ad663f29 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:30Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-cf8d774c5cf573d7152d959ec5219b60-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ce68dc01-b8b7-4b85-a07b-72ec74e5899a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:30Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-cf8d774c5cf573d7152d959ec5219b60-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-cf8d774c5cf573d7152d959ec5219b60-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d37ae34d-1f84-499f-b15f-bc563946a798 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:55Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-543a2eafdae2d4f24b1e61fd1bacb5dc-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=334b51ae-fc87-4dc0-ab6f-047230ef0dcf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:55Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-543a2eafdae2d4f24b1e61fd1bacb5dc-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=96a75f60-269a-4aef-91b5-ce07c9f11a8d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:13:55Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-543a2eafdae2d4f24b1e61fd1bacb5dc-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-543a2eafdae2d4f24b1e61fd1bacb5dc-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e035a106-5eec-4ead-a0d2-5416e7f9ee1a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:14:10Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-3e9de97c8d15d351f60bf0a1ea234b20-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=fd5cb5a7-c32d-4c6f-aa6b-40bdee946e3b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:14:11Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-3e9de97c8d15d351f60bf0a1ea234b20-pod namespace=chains-e2e-louv operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a681da1e-17fc-4ab9-b4a6-1aa499275d26 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:14:11Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-3e9de97c8d15d351f60bf0a1ea234b20-pod namespace=chains-e2e-louv operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-louv/Pod/verify-enterprise-contract-3e9de97c8d15d351f60bf0a1ea234b20-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7bb149cb-4eff-4272-9ccb-e9e48eb0ae10 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=adda7d06-adfd-4d4f-ad5b-0eccfc472c9b"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d553444e-7f68-4717-a142-757a47aba6fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"c5132a82-3a31-443f-9be2-07b95f8cc9f6","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-09-30T02:14:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=2f22aa9a-e8f4-46df-ae68-8ca595932a5a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=e0dda797-e939-4869-b507-364fcaef6f36 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:34Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=649e19b1-7803-4ef4-adc2-cb81e4658f2c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=3d09ceec-b5fa-4014-8e4f-7ab0ac6323cc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=ee98e5ca-c4a9-462f-8323-2fdb67796c56 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=e2736c50-4f16-45e1-9fe4-f0747ac9d504 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=516d5b78-68d5-4ec6-9e44-7e4da68709d2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=169074ee-463e-4238-87f5-0192c3172c9f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=84e2a768-921f-4b3a-822e-b6cfa8ffb8ac user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=4a524da1-7824-453d-877f-4985f5926094 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=5d5e5752-d708-4c38-b6c1-d89f4fdd0b8a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=551b3463-7ab1-45c5-a781-20d947a0bf84 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=82a7b6c9-4319-4595-a2bb-0ea71ffbe3ff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=8442b62f-6168-4389-8222-68feb32fe150 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-09-30T02:14:35Z TRC kyverno/pkg/webhooks/policy/handlers.go:97 > ClusterPolicy (kyverno.io) is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=5e402e72-0627-4b8d-955d-8274c9bac9d1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d4daecf-5a69-4e19-9884-8bafbaa5b8cb"],"authentication.kubernetes.io/node-name":["ip-10-0-159-125.ec2.internal"],"authentication.kubernetes.io/node-uid":["53ef27aa-11d4-495c-a04b-3d80c0be8387"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["ff35df4b-bbe9-4301-9db1-228471ec7648"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"2b32c4a3-f5ef-44db-b807-e07ecb7dd87b","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2