2026-10-05T01:57:05Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.7
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-05T01:57:05Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-05T01:57:05Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-05T01:57:05Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-05T01:57:05Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-05T01:57:05Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-05T01:57:05Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-05T01:57:05Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-05T01:57:05Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-05T01:57:05Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-05T01:57:06Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-05T01:57:06Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-c44dccd8c-cf6gc logger=setup/leader-election v=2
2026-10-05T01:57:06Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-05T01:57:06Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-05T01:57:06Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-05T01:57:06Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-05T01:57:06Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-05T01:57:06Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-05T01:57:06Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-05T01:57:06Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-05T01:57:06Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-05T01:57:07Z INF kyverno/pkg/logging/log.go:180 > 2026/10/05 01:57:07 http: TLS handshake error from 10.130.0.2:40500: secret "konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair" not found logger=webhooks/server v=0
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=cb298704-8387-4e06-9fe9-ad464a70b410 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=203ccaf9-9776-4c61-b907-06a1cd1624ad user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=f5f02888-330d-41c6-a36a-96ce794d04f9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=d241a252-e056-43f4-bb17-4cf0c5e27352 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=3561d805-d16d-4930-9910-52443da24a49 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=5954e517-99a8-4f18-ab3b-efe41832ac7f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=33cc70b0-d735-4981-a67e-3b94db61f76b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=4dc8a677-d494-4b02-a76b-981998add662 v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=4de20a46-d7df-41c1-a9fa-3ca1751435b2 v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=1fd99ade-03ea-4adc-9e52-1683c253bcf4 v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=19461095-28ef-4915-a60a-5397d5fc5a4c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=23e94e06-2fb0-4816-9cec-da8fe1291eec v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=c869b86c-1dbc-4370-be08-765c3453cde0 v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=9c410c29-ce15-4920-82b8-6d13bf655c9f v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=e705244f-2fef-4cd1-b6dc-d03a74f6cbaf v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=b0784ce5-54f6-431b-85fe-82ff7e9d3428 v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=246ffc79-d31e-4582-97c9-25f55b95fcd1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-05T02:00:38Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=89e263cf-8deb-4a52-a67d-f8aeb0361d0b v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=b303a86f-64be-4763-b185-ab307e6e6166 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=455bca27-f1cc-4a2d-a3c9-14dae894709b v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=340a46b2-e9d4-42a4-9f94-d72884cf7084 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=b25ccbfa-6170-439b-b52a-a2d9dc9bce4f v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-05T02:00:39Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-05T02:00:39Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-05T02:00:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=cefa6ed1-fe07-44bc-a3f5-968c90862dc1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=9c3a244a-3b9d-4530-b728-73b8670f53b3 v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=b26945e2-66c2-4b78-812e-0b583286333d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=b4e88a9f-7ec3-4bc6-8eaa-95ed546f92ad v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=e0a3e422-e798-4766-aa6a-81c766a4472b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=19583880-e4b2-4921-89e7-fee568e6390e v=2
2026-10-05T02:00:39Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-05T02:00:40Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-05T02:00:40Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-05T02:00:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=c034875d-bf4e-448d-b87e-58b7ae90d9da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0d9e0682-1027-4ac2-8c00-8d38940a1631 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:40Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=cbff78b7-ee27-4a41-9909-3345a3d7be56 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=5106dba6-cca9-400c-a13c-4faeaf1a41e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:42Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c2f0b16c-6e4a-4d82-87b3-870dc2217785 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=183c5136-8777-4ae0-8999-994671235bdd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=909ec9b4-64a1-4b54-8315-deed6e30fbe7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=017dc5f7-4c0f-4eb4-9d4f-16299409a567 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c7532720-e38c-4185-ab5a-f904218760e7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=8daf74ec-7f38-4387-9b6f-8d3a1b3fd440 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=12b1f0fc-7cd5-4425-9f19-36d8bf5de91d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=ecf42f66-9e2e-4379-a60d-aef56adf5d34 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=3fc91611-2bf8-47e9-93d0-5e077987a18a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=7f5b7b3f-1385-4c5c-80de-6fb134ef0d9e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=72b63279-7979-43d2-bba7-fe285793bc7d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=e67a1702-fa22-415d-9eb3-323c133ad405 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=a376821a-00cb-4bb3-902b-f2b4074d00a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=9ce3862c-74e9-4f21-b611-3cd59e26cbcf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=395a2365-d66b-43c3-93b7-2a96d3225b32 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=2559db5c-4b63-433a-9d21-d68a7db39958 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:43Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=1f52cf6f-9834-45d5-b70d-3cf3da758921 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=240ec714-7d2d-4d14-bc0d-462bf77389fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=7a3cd390-b3b3-4e3f-89e9-f92bed2c9774 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=c0c85630-6caf-48ef-9ca0-337b8fc167ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=2dbd0576-80f4-498d-ab58-f6ddc925437f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c94dd7bf-d8ef-4fe6-8933-e0274ee91240 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=8066009a-b0ba-4507-8256-97c1e130dcf2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=8b18796f-8b01-40cf-880d-a30724384c00 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=4b2b6b6a-83ac-4e64-80c6-e3f4344a24e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=38b2ff4c-7add-4b68-ba79-61607ea39764 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:45Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=041e4a6b-de82-4b31-8cdd-9868e4be4fae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=8ecbcf4a-bf9a-4280-b61f-6c4d04d6e250 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=bdbbaa17-f552-44ce-86f8-981c4b53661b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f45b8255-0c31-4cea-a1e9-b9e369fbee41 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2f987bc2-b218-4923-94c3-6b078d6d89c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=dba7bf8f-1dc6-4347-be91-28bebc4fdbf0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=2518e31d-22f9-4d9b-b4a4-942c46d4ddb4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=bc846a12-2f9a-4ae7-914d-8134e3bd183d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=78402cbb-5698-48e6-b650-20eaaa4d0ef5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=0b9161f7-30d5-4d0c-b1ee-d71387134627 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:46Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=5055530e-bd1d-486d-a02b-21db11a02fd6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=0a2a6266-2f2b-4b4b-b908-182b066e9a60 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=87d4c010-78e4-4d92-ae96-834a0db7248d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=40d556d4-2215-4881-9d10-19cd2da615a9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=eaacaeb4-2b79-4b0a-bc90-fd18ce744e47 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=399324db-6a38-4e2a-872a-15a8f0d9d0d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=d5e02311-0128-4e58-add1-35af563d95b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=80144904-d233-4368-8d96-3ad7b7069414 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=5b64c9bb-2acc-467c-8463-adbd5186673c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=4d230864-d77f-4ca3-8082-63ec6c4dd41f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c4ead9b7-a2fb-483b-9fd9-5fd5a7650a60 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=c8c63f0b-e441-47da-b1c9-e77aa8125efb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=6078043b-08d6-40b3-861e-043788a0b05c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=dbc180c4-ec85-4773-87ea-002a475c88cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=0c8a752c-ad65-46f5-b7ad-5b2d3c0733de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d9dbbf63-d36a-44e4-a810-278e4559ad24 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=63a13816-742c-4e38-848e-80d402d49e60 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=d3d97ec3-af51-48d7-bffa-60e362102ae5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=a45737a3-8ee3-4be5-a9b7-2ca09708935e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=a62cf0de-5258-42ac-b258-73b65becafb3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=7c8bd296-df6a-4670-8017-3240695a685a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=1093442d-f712-4821-899a-dbe42fb218ba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=c893d2bb-6aba-45f2-99d5-db4792aaa1bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=fcf07ac2-936a-4aba-b6bc-5d41dd038ba0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=3d7ca23b-027a-46cf-8626-2ad4723c1e22 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=d5938d07-e342-4dde-abb3-ea2272ad61a1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=d6b5871c-337d-4bec-ad63-e58c3f485e6b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=40b439cd-8f9b-4743-b891-960c1d09eedf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=9132c641-b300-4de3-ad72-149b93b5f22f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=ccf3dff2-387d-4d2b-9a59-4fa6b94bbf8c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-05T02:00:50Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=f21ac640-3177-4357-8c62-8eccecde4eb8 v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=3d7a9e85-c86c-4c7a-9763-a606904631dc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f0ffaea2-1e19-4f50-b5de-1c1fc50dcdcf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=91a85972-dbd1-4d1e-addf-137f7c2ee2d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=e79d15aa-104c-4456-bbfe-0b3deb0db3db user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=dbf294e8-ae98-4db9-8a4e-364880e2c311 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=356c1a76-e1a3-4589-aff7-ff3f0af09503 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=18362811-40ae-49a6-a441-13fc5f0fe96e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=382d3a6a-7957-498e-b099-14d02f946ac2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=1463ceb8-e7ba-43e7-80ce-1bbc1dd7257d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=12638efd-00e7-40b6-8063-c87f56c3d879 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-sww79 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-sww79 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9137b22e-b4fe-4a60-aa9b-6f7c27c981f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fea4106-97ab-47a1-a4c9-d8fa152d92fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"482d3bcf-db79-4627-9666-478a7c11e5b8","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-9hhkr namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-9hhkr resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a470953b-02b0-4977-a773-0acce4d4beee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fea4106-97ab-47a1-a4c9-d8fa152d92fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"482d3bcf-db79-4627-9666-478a7c11e5b8","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-05T02:00:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e697e360-67e6-487a-aa4c-9fef36005a62 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=d22c115c-7e91-4c06-bb59-b95180ace425 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=3b289339-b8b7-4ff4-b21c-54a728de35e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1e2303a9-3606-40c7-a67b-1983e40e6604 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=5c22c676-ad4b-45d4-bbc7-f7231b918b23 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=c35278ae-d9bc-4d88-a55f-daa3b5014aab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=05f3e558-bead-4a1f-82a1-bcea9a48e092 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b4cc1a4d-461e-449e-8882-4592eb761142 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=4a3f75b6-ab9c-42f9-96bf-e364d82e5f57 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c744018d-5889-4da6-8fae-69c21a68a085 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=0f8f7061-7812-468f-b437-df8052538a2a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=088fdd8c-7cd7-4e29-a7f5-a20e5e8ae347 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=e3a0525a-855d-45bb-8908-7b6911566483 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8e84b278-9cb8-469f-bc5d-dedc01024d1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=007adc24-47f1-40fb-a167-9ef477cca2ef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=c7a5cfff-e2dc-438e-8280-52eb930d2880 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=26fef8f0-5618-4c5f-96c7-38094680a197 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=69a362ea-90d7-498a-a5cb-c3e0b0ddda8f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=cb7dda4e-a239-4a8e-bbee-269b62e30d9f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=dfbae5f4-d1e9-4387-b086-a788aaa2bec2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:00:54Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=be212134-3990-4335-91e6-aa29d8e14d71 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=b75a1657-0ce4-4242-839d-eec73e79ff99"],"authentication.kubernetes.io/node-name":["ip-10-0-161-165.ec2.internal"],"authentication.kubernetes.io/node-uid":["66f3a753-dfb9-4419-b0c3-17f9dd934388"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["b88f43b2-b903-4fd7-af3d-213c18d1f578"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"7c72c3ad-e615-4027-acdf-d2b75787bca0","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-05T02:01:05Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-679cd namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-679cd resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=6dd5da2b-4378-4e9f-9749-5769dda0bb17 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a60bc21f-afab-40b2-8f43-206560bfff04"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"1c5489ca-d495-436c-b8fe-5e8bb43d7566","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2