2026-10-09T02:10:55Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.7
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-09T02:10:55Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-09T02:10:55Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-09T02:10:55Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-09T02:10:55Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:10:55Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 Policy is deprecated and will be removed in a future release; migrate to NamespacedValidatingPolicy and the other namespaced policy types (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:10:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-09T02:10:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-09T02:10:56Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-09T02:10:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-09T02:10:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-09T02:10:56Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-09T02:10:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-09T02:10:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-09T02:10:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-09T02:10:57Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-09T02:10:58Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-09T02:10:58Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-68cfc44c4f-l7dqt logger=setup/leader-election v=2
2026-10-09T02:10:58Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v2 PolicyException is deprecated and will be removed in a future release; migrate to PolicyException (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-09T02:10:58Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-09T02:10:58Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-09T02:10:58Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-09T02:10:58Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-09T02:10:58Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-09T02:10:58Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-09T02:10:58Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-09T02:10:58Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-09T02:11:00Z INF kyverno/pkg/logging/log.go:180 > 2026/10/09 02:11:00 http: TLS handshake error from 10.130.0.2:36230: secret "konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair" not found logger=webhooks/server v=0
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=CREATE uid=0f1826f1-abc0-434c-b309-c79a04130cba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=adjust-buildah-resources-for-remote-platforms uid=3dd1942e-e5e4-4db9-aa59-6efd86b7a39a v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=adjust-buildah-resources-for-remote-platforms type=ClusterPolicy v=2
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=f3505bf3-9373-49a9-9d54-6a4d27635f4b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=65f2f6cd-387a-49d4-bac6-76cfc6a565fd v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=05d4d0a4-f7fb-42be-8c7b-4fce324b727b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=4f8b2b71-ec98-4ec0-b7bc-45a4c1aa1aba v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=5ba754fa-60e0-4681-8090-11ac7b4b8ace user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=0457906a-6fb9-497a-963f-a03e7ad5ce6a v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=f7a6ca87-1d1a-466f-abb0-e1aefead3e7e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=d004216c-0030-4a6e-a78e-4e3b4816cb22 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=5955cd87-71ce-42b8-ad04-26b63693ecb5 v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=728528a4-b435-4dc5-891c-352eb975c9c2 v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=909ad8d8-6432-4505-94fe-67f9f9ff8e99 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=47917cf7-97d8-4193-bbc0-763fb801ce1d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=775015e3-1400-42c6-b02e-c65006bddba9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=700da07b-81e8-4cdc-aba1-03b48798d8fb v=2
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=6cdcbc22-59e3-4ffc-8181-ad612805019e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=4ebdee30-8bcc-4802-b54f-6b74001dcc34 v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=bf817257-0d87-44ee-a4a8-6df03a132881 v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-09T02:15:47Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=7b19639e-8834-4b4d-b19b-6ea4a5ce963f v=2
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=a2caa146-57f0-4220-b6cd-aea2b40633b7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:47Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=babd73e8-c06f-452e-98a4-b99766d2210e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=03cd82d9-ef07-4e64-bfed-3beb6a5629fe user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=0a44d9f9-26cd-4e00-87d0-7de254594e24 v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=6bb619b2-99c6-42c1-9148-f93d71d0828b v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=7d797bd0-96e5-4815-b382-3cc1f49525d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f5bc7cc2-8f2b-4899-81cb-f522e5134956 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3aebf3ac-9676-4ca1-b900-768172a3e519 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=6dc4b8e5-455c-4a79-a6e7-f6f023347082 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=3c628651-e414-4f76-8e30-056212dcff0e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=e5aed1f8-782d-49e1-aa1b-4bf6c3f17553 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=4f5429cb-10a6-45a1-b68e-30ff1bf66a4e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=e3135090-cdf1-4404-b116-1e6e945a386c v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=9e2e0d19-7466-42c7-add8-7a6a07deb17e v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=5af3bd01-9054-4912-a5b2-43e9a54fef32 v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=dbc53794-bff5-4922-921b-4237c33cb5db user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=06c2c844-e5f3-4833-8a66-a006e7cc1328 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=8da6cc42-6dbe-4fd9-9913-e0d378dcbc76 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=cb4421b1-5620-4a4b-a3d6-d79e3584cca8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=ebfb90b1-30f4-449d-ae24-e275f248a30b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=35871e63-2300-49f6-abca-da0fb2e58344 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e25b0748-8125-49be-9bbf-2e011f66990e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=46587b86-a44a-4efb-9c0d-4c8216fe20c2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:48Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=9e454c1d-c720-45f3-82a6-e244a3dac070 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=fe911db1-1901-4914-a19e-b385e71436f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c111a29d-f02b-43b7-bc50-5e4f27e6be8a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=671ee27c-ac50-4831-98ad-633651cd3069 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=7a601c6d-af8a-4459-a5b9-f15ba6678018 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9e3e5bd8-7be4-4f1f-96ec-18a3a03bdf49 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=b94e700f-fa1e-4970-ab4e-e399eaf2a0b0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=4628560d-086a-4ff0-b318-526c8e1f85de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=3896baa0-7820-4177-8c92-533b64b86a3f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c80073c8-4053-413c-90af-f4441f7e7c0a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=19264548-3942-4269-80b9-a32041b73c33 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=72ed0c1f-7058-4e81-9157-9b61e7cffc5e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=16e48f6c-8223-48bb-96ee-1645dadc91e1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-minio-bucket namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/create-minio-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=a14f686c-b8f2-4b62-9355-b38a5ddeb8b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=tekton-chains-signing-secret namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Job/tekton-chains-signing-secret resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d0ae54c1-eeb6-4bf0-8c6d-62122f3653dc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-chains-signing-secret-drmq7 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-chains-signing-secret-drmq7 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=395ef77a-2414-456c-b891-7bbc18d614a1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=99c3b953-5a37-4bf6-8940-e3cb44dac20f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0965e856-7b5d-48ec-a535-438c93de4d4c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-09T02:15:49Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-minio-bucket-kd4lp namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/create-minio-bucket-kd4lp resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=39b519f0-4b0e-41c9-923c-eeb3679c98d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=99c3b953-5a37-4bf6-8940-e3cb44dac20f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0965e856-7b5d-48ec-a535-438c93de4d4c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=ae723f1c-23cb-4e73-b5c9-7ec7409eda21 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=5ca449f1-07b1-42f6-8b5d-5f77ac01ceb7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=6aae7bc3-f99e-4bf1-b603-c68d4c7c8f3d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=158244a0-0ff9-4e33-a0dd-12dec254c298 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=012bc42c-45af-4b1c-a6ff-5cc2c53d98fb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=5df148fe-a15d-4be5-a490-4d89a43bfb5f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=081f7657-eb53-435d-b48c-dee30a3910e6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=6c4fedd9-8114-453d-b61b-d37389017203 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=1159d09a-6f63-483d-9396-eec1a62a7328 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:50Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0aa66b96-b136-40c1-8669-1ac61367b153 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=17aa0b78-4307-460c-a076-423b634cc6b9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=cba0bce7-151f-490a-b850-175c79ad901a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=598d0caa-f8e0-4d11-b0fd-cd4cc704eb49 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=54685fac-59b3-41cb-8534-eeb4a5d2c144 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=62c72c27-b87d-481f-84ec-35874f94547c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=f1676a3d-29ec-43f3-b812-3a9c8eae5817 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=e02fda40-b835-4f34-b8eb-ca14e79820ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=6ad3e197-f453-4f35-8e92-b65d3e34ea6f v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=07188b4f-fb78-4436-ae99-e5b5fe6f3b65 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=d5065b25-f0e9-434f-b0a1-73785455fb89 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=e4656c75-0190-4467-bc83-220587d6480e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=b52c890e-2a87-4b3f-8c45-ca458101c5ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5e698dbf-908a-4d75-98d0-74ca3bc5986b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=c8a93d32-10bf-4c8d-8b1b-9b075f4f7bcb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=6d5ac50f-374a-448e-a947-09affa4b94dc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=b38b9e9b-c0b3-47b3-b6ba-67dc7de79d08 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=7c0f204c-0d0b-4d33-aa3b-bfb39af240b8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=2173cf49-5d0e-4319-9094-3ced9d5637b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:51Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=6373db9e-4a48-44e3-be45-2e1227d59815 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=3e1a7d0f-320e-4058-b16d-3dad22fcb92f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=28265812-265f-4cfa-9e89-0aadd9a93f04 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=69280aeb-c269-4a4c-9d1e-eebcedd99f77 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=78aee1e8-1777-4fda-9196-1628097f8278 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=8f18a87b-2654-40b8-b6fa-9c794f039720 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=bd944ba3-ffa8-430b-a2ce-1002bb804a45 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=7deddebf-b5ae-4816-b261-76f091fb98e1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=7d92b47c-e2f6-401b-b838-9fe02701c3de user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c262c36e-4c63-4160-bf66-e517b0865f7e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9ebe5639-e991-41b9-8cce-33e69716a944 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=136e9b3f-27b8-4ba3-8928-935cc95ec788 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=a528c3a8-5031-4e4f-b26d-f73e96c7e2fc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=3e12dc90-1c27-4a36-833d-a240084a8b83 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=51832dce-eed1-4104-8c5e-fe3c232590b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:52Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=bab82a57-3a71-4b1a-8931-bf00bc124de6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=32684dac-983e-4d8c-995a-f05b5f51834f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=61fd56ac-d5e6-4361-a1ef-15abf33dfd61 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=6d98ca0c-0701-47d9-97fc-c2a4241f9cb8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:15:53Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=f5e95254-8e60-4d71-996c-ce2b530fe05f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:16:09Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=pipelines-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/pipelines-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=0fe3d6c7-4f4e-4a42-a95e-ba62ef86bc60 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:16:09Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=vacuum-all namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/vacuum-all resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fc0bc1e4-575b-40f7-85d1-93cba8711ae2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:16:09Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=releases-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/releases-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=08000c9b-1848-48ca-8c24-62e079565d8f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:16:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=pipelines-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/pipelines-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=faf74582-591a-4f20-842d-93e216b84ead user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:16:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=vacuum-all namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/vacuum-all resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=19e06b17-91a9-479d-81b9-a076d5964fe4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:16:19Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=CronJob" gvr="batch/v1, Resource=cronjobs" kind=CronJob logger=webhooks/resource/validate name=releases-vacuum namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/CronJob/releases-vacuum resource.gvk="batch/v1, Kind=CronJob" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8bd3aa2c-20fd-4d27-add0-81f7bb5e15b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:16:27Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 Policy is deprecated and will be removed in a future release; migrate to NamespacedValidatingPolicy and the other namespaced policy types (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:18:56Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-dbb3728a88 namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/StatefulSet/affinity-assistant-dbb3728a88 resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=4c914af9-622b-4c53-a6d6-612add14ace4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:18:56Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-dbb3728a88-0 namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/affinity-assistant-dbb3728a88-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=7a207777-bfc9-41c4-a6e2-b5053322148e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=2c927bb2-23de-4648-9f7c-ff85271052de"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"a9d6665b-fe65-4464-975d-9355e296a018","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-09T02:18:56Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-czzomburqy-init-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/buildah-demo-czzomburqy-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=301e1347-c36f-48ec-97e4-342592477862 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:19:08Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v2 PolicyException is deprecated and will be removed in a future release; migrate to PolicyException (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:19:10Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-b6np9 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-b6np9 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d5b6bfaf-8b68-4f0f-8487-0a9e6555b694 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=56ae0bc9-726c-412d-bb28-59efb9c47878"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0bb1352b-f679-453e-95e2-0f78a3e4fa49","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-09T02:19:11Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-czzomburqy-clone-repository-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/buildah-demo-czzomburqy-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c2eb40ba-408c-4ef5-8daf-8efad6053e80 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=cf8c4b15-a4d7-4203-beef-3408e132be25 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=84ba0cd4-ed73-441e-90b4-d21403530783 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=d54ed491-648d-4b82-816c-01e4349f90b5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=2654412c-af4a-405e-a3cf-04af432edbec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=184e1d2e-579f-4de6-905a-ce793f0c0732 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=7cac3220-4f50-4972-8a35-c3aaccff2714 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=f0054452-4f15-44b8-9a28-03e350701037 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=03ad4f09-9648-4b64-a536-d7380f9ecab3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=01be89a2-aac0-4f5c-8eb8-7dc40ec418b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=48b58f57-ec12-4f0b-87fa-7adca90d96c7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=a26dbea0-2561-445a-8c6d-c5a2ef3c71ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6444d520-d765-4bdc-9008-390b7371c057 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=dbc33694-cf84-420f-b227-b6491519ffc0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c2ce6246-7d47-41f4-88ab-82439067a5d2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=0096f0b8-16e4-44b9-a88e-30c4f702fe92 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=9b242379-8c74-4ce4-a219-f022940012b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:19:31Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-czzomburqy-prefetch-dependencies-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f8bbf977-13e7-4bb4-8d8f-10e1adf9df5e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:19:31Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-czzomburqy-prefetch-dependencies-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=1d971b63-b131-49d1-b3ce-61b75ef64b8e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:19:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-czzomburqy-prefetch-dependencies-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/buildah-demo-czzomburqy-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=90180c3c-aa4f-4709-81bd-a9d804e57fd2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:19:45Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-czzomburqy-build-container-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/buildah-demo-czzomburqy-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=540fb413-6279-425b-94a8-c24da19e6d01 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29858540 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29858540 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=aefdf067-2b7a-43f4-ab8a-9eee3fcc41f2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ced9e1e-5a2d-4906-bf5f-9e6cfd0c4e8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"59e8428f-9fce-41fc-801c-033d58ca9a74","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-09T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29858540 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29858540 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ccfe0501-1a97-4781-aae0-ac9a96b1c44c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ced9e1e-5a2d-4906-bf5f-9e6cfd0c4e8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"59e8428f-9fce-41fc-801c-033d58ca9a74","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-09T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29858540-twtxh namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29858540-twtxh resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=59f4cc8b-496d-4593-ae02-5f98c9390c13 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=99c3b953-5a37-4bf6-8940-e3cb44dac20f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0965e856-7b5d-48ec-a535-438c93de4d4c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-09T02:20:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29858540-fdlgm namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29858540-fdlgm resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e53a8a53-c4c5-42ed-88c0-b658e36e20fd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=99c3b953-5a37-4bf6-8940-e3cb44dac20f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0965e856-7b5d-48ec-a535-438c93de4d4c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-09T02:20:10Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-4pfxh namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-4pfxh resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=18d605f3-ff23-431b-9d56-fcbc621b507f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=56ae0bc9-726c-412d-bb28-59efb9c47878"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0bb1352b-f679-453e-95e2-0f78a3e4fa49","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-09T02:20:12Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:20:55Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-857fb namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-857fb resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f36382f9-31fc-4624-8e66-2bf0a31cb118 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=56ae0bc9-726c-412d-bb28-59efb9c47878"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0bb1352b-f679-453e-95e2-0f78a3e4fa49","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-09T02:21:54Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-czzomburqy-build-image-index-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/buildah-demo-czzomburqy-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=04edca24-2b5d-46f5-baff-fd4b203ae518 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:22:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=204bbb8d-465a-44f0-bf4e-82394d66c964 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=9675ede9-99d2-4730-a32d-37044c7e5710 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=4070ec93-87cb-4330-8630-b2b8a317b1a5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=44773c3b-c92c-4eb1-8df0-b49a2686e4a3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e68c06e4-cfe8-4b5b-8a9e-2098d76bec70 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=7a53efa6-e34f-4cb0-a99e-338da0bf4d61 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=9d47a3c1-77cf-49f7-914c-cf5339774a7b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=ae75634c-8bef-44b4-aa5d-066ead5ae229 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:21Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/rest/warnings.go:107 > Warning: kyverno.io/v1 Policy is deprecated and will be removed in a future release; migrate to NamespacedValidatingPolicy and the other namespaced policy types (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ logger=klog v=0
2026-10-09T02:22:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=ecb63758-1cd4-4cb4-9b15-15d70766cc7d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=7bb5b26d-c92b-4478-a16c-0836993e6c5f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=d97f9bb8-4df6-449c-aeee-49434deb3b3f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=2f332065-ec62-4851-8b88-9b5cb785697d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=9748bd33-8139-491a-948b-0658dca2359b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=fefb4ae1-fa3a-40c6-bab2-0842e2a0a6a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=67ccd06c-3f01-45a5-93f8-9d0ff0b836b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=8f837da8-492d-4af6-9c32-41a888aa1a92 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:22:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-czzomburqy-apply-tags-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/buildah-demo-czzomburqy-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=8836d517-4aa9-4d61-bf94-300598600b6d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:22:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-czzomburqy-push-dockerfile-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/buildah-demo-czzomburqy-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=08bc1bc3-588f-43f9-bf63-456397d7e18f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:22:59Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-6c217b23e6cc54c5bd598cc06c007c75-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=09d2ceaf-0683-4c1a-b8e5-3a37e0e94626 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:23:00Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-6c217b23e6cc54c5bd598cc06c007c75-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=8d380cfd-7251-47e4-a8cb-163cb4dc13f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:23:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-6c217b23e6cc54c5bd598cc06c007c75-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-6c217b23e6cc54c5bd598cc06c007c75-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2d2d2b90-87a2-42a7-9366-37021da1ed0b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:23:25Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-93abcf2fc58e11ff8aaefe87e98747d9-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=364b8b81-18db-4246-a8b0-fe06e550d41b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:23:25Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-93abcf2fc58e11ff8aaefe87e98747d9-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=9d60cb89-a006-46e7-aa32-15cb1cbc44bb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:23:25Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-93abcf2fc58e11ff8aaefe87e98747d9-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-93abcf2fc58e11ff8aaefe87e98747d9-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2f768f13-1573-4c4b-a87e-208a803e15d8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:23:37Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-57366be430bfc0fde6b8c3209432ac8f-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=8280071f-29a2-4a2f-8f4d-177b22fa33e9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:23:37Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-57366be430bfc0fde6b8c3209432ac8f-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=2bf3213b-a3c5-47dc-8a79-e66f77d5d49a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:23:37Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-57366be430bfc0fde6b8c3209432ac8f-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-57366be430bfc0fde6b8c3209432ac8f-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=66ccb775-45b4-459d-a4f4-7d80f5d33854 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:01Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-5e1cb010205316768772736e82df9c39-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=45a1b155-35fa-4f6c-9c91-e8d419501653 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:01Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-5e1cb010205316768772736e82df9c39-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=3a25ad11-21be-44e0-9a66-17eb66f0df2d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:01Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-5e1cb010205316768772736e82df9c39-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-5e1cb010205316768772736e82df9c39-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c3908974-f86a-4ce3-b838-7a187b653320 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:13Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-a52813996579c6a396a030543d19ef73-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=fccd4cb2-b9fd-415b-a214-3d0e9c8582f4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:13Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-a52813996579c6a396a030543d19ef73-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ab1cbca6-4bf6-473f-b5ee-38ee0f651f37 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:13Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-a52813996579c6a396a030543d19ef73-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-a52813996579c6a396a030543d19ef73-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=fce3a9be-f372-474d-9607-6398890581c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:27Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b64fab39175b048999b9354a4f9be2ae-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=3649811d-c70d-436f-bc70-95e254cc3efb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:27Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b64fab39175b048999b9354a4f9be2ae-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=2694d1a4-a339-4c68-af16-4a27ce17c114 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:27Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-b64fab39175b048999b9354a4f9be2ae-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-b64fab39175b048999b9354a4f9be2ae-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=1b5a7eb1-15a8-40cc-aa82-73ee19adee03 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:45Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-37cccfb69e215364f0052a5b68318ffc-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=8dd97ff5-da91-4e0f-999f-bbad33dd6253 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:45Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-37cccfb69e215364f0052a5b68318ffc-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=bae84d3b-0c92-48a2-bdce-7a9fad2ad8d2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:24:45Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-37cccfb69e215364f0052a5b68318ffc-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-37cccfb69e215364f0052a5b68318ffc-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ed7080ad-012f-41d3-9b55-70eca840b4aa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:25:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29858545 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29858545 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=17a0626a-cc8d-43e2-9c48-4d724dd13d5f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ced9e1e-5a2d-4906-bf5f-9e6cfd0c4e8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"59e8428f-9fce-41fc-801c-033d58ca9a74","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-09T02:25:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29858545-9pngc namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29858545-9pngc resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c8570404-3466-4b2c-a90c-949b339b9470 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=99c3b953-5a37-4bf6-8940-e3cb44dac20f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"0965e856-7b5d-48ec-a535-438c93de4d4c","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-09T02:25:11Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4217fed48b6847531f9e4e2c5cb95b44-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a5ff33d1-ff0c-4656-8ca3-d1ae8e6cb54e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:25:11Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-4217fed48b6847531f9e4e2c5cb95b44-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=74cb64ef-de30-4b2d-8e98-5a5085360e5d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:25:12Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-4217fed48b6847531f9e4e2c5cb95b44-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-4217fed48b6847531f9e4e2c5cb95b44-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=656ecb73-3066-4f37-b407-e89386bc0a7a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=70e16c7b-b25c-4355-a1e0-e28d1ecdf9be"],"authentication.kubernetes.io/node-name":["ip-10-0-148-62.ec2.internal"],"authentication.kubernetes.io/node-uid":["a6957433-9463-4a4c-a625-cb55e00d7b32"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["d2596445-5e7a-4118-9483-a17284864f2f"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:25:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=f54764da-706b-4a09-ae36-b21c3a4db559 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=a1bc5a57-74c6-4437-9818-85efc2fa8ccb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=69d474bf-289e-41c0-9813-b21eebc188f2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=254edfd0-a55a-4893-abc6-ff45e999af38 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=adjust-buildah-resources-for-remote-platforms namespace= operation=UPDATE uid=370c8e1c-f4d8-4a12-aa8d-d4e4145db777 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a006a04c-15e3-46f4-82b9-1d992946f9e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=8e1f19c7-89f9-4cdb-9a95-1c1f480406ba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=04ecec4d-9f3f-4bd8-9fb3-04a300185663 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=3413f48a-e377-4424-95bc-d767b9c235a2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=f3fe5d5c-60e9-4787-a98b-8815fd9b07c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=88d59b5a-e088-4303-a2aa-4aeb7f7a6958 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=47062f74-06d2-4c8d-9e02-ee8ecbdf75e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=7c6b597f-d061-4c86-b114-25c237481a13 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=3206521c-bb34-4070-b629-d77d14fb9682 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=97a27fb9-d51a-4dea-958f-407e65950567 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=3a0864f6-f704-4bb7-b4e0-bbbc6c5d9675 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=7387e6a6-1b5e-4e1c-9054-a5ff74278995"],"authentication.kubernetes.io/node-name":["ip-10-0-141-108.ec2.internal"],"authentication.kubernetes.io/node-uid":["0aacfe9f-a290-4397-89cf-0c30bdbc5e40"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["3933aa5e-8757-4674-a4e8-55fed2c444c1"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"b5bf5337-ea8b-4f7c-9cf3-759d1de9febc","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-09T02:25:27Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-c943c0976b37da005b82ca3d366dec26-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=46b15d6d-93ea-4d31-80b9-ec39552cd733 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:25:28Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-c943c0976b37da005b82ca3d366dec26-pod namespace=chains-e2e-suek operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=568b6259-224d-4001-b7b8-47f8d6472821 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-09T02:25:28Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-c943c0976b37da005b82ca3d366dec26-pod namespace=chains-e2e-suek operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-suek/Pod/verify-enterprise-contract-c943c0976b37da005b82ca3d366dec26-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ff5d9625-effd-479e-b226-9cd0ce8f6585 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=35ecdb9b-3aa6-444f-88ef-301bcd0da399"],"authentication.kubernetes.io/node-name":["ip-10-0-166-66.ec2.internal"],"authentication.kubernetes.io/node-uid":["af3cafd1-ac12-4197-9613-c5bff8c42bd4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["af3271e3-47b8-4923-ae69-307174c4e585"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"245c9707-6518-4c59-9546-5f0e8e3216a5","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2