2026-10-02T02:35:40Z TRC kyverno/pkg/version/version.go:49 > version hash=--- logger=setup/version v=2 version=1.26.7
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > add_dir_header=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > admissionReports=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > allowHTTPInNamespacedPolicies= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > allowInsecureRegistry=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > allowedResults=pass,fail,error,warn,skip logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderr=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > alsologtostderrthreshold=0 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > apiCallTimeout=30s logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitEnabled=true logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > autoMemLimitRatio=0.9 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > autoUpdateWebhooks=true logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerHost= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > cleanupServerPort=9443 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitBurst=200 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > clientRateLimitQPS=100 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > controllerRuntimeMetricsAddress=:8080 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > crdWatcher=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > disableCertManagerController=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > disableLogColor=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > disableMetrics=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > dumpPatches= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > dumpPayload=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > enableConfigMapCaching=true logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > enableCosignLogging=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > enableDeferredLoading= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > enablePolicyException=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > enableReporting= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > enableTracing=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > enableTuf=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitBurst=2000 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > eventsRateLimitQPS=1000 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > exceptionNamespace= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > excludeBootstrapResources=false logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > exemplarFilter=trace-based logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > forceFailurePolicyIgnore= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > generateMutatingAdmissionPolicy= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > generateValidatingAdmissionPolicy= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > httpAllowlist= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > httpBlocklist= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > imagePullSecrets= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheEnabled=true logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheMaxSize=1000 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > imageVerifyCacheTTLDuration=1h0m0s logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > kubeconfig= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > leaderElectionRetryPeriod=26s logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > legacy_stderr_threshold_behavior=true logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > log_backtrace_at=:0 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > log_dir= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > log_file= logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > log_file_max_size=1800 logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingFormat=text v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag loggingtsFormat=default v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag logtostderr=true v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAPICallResponseLength=2000000 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAdmissionReports=1000 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditCapacity=1000 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxAuditWorkers=8 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxGlobalContextEntries=0 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag maxQueuedEvents=1000 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsCASecretName= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsHost= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsKeyAlgorithm=RSA v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsPort=8000 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsRenewBefore=360h0m0s v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsServerIP= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag metricsTLSSecretName= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag omitEvents=PolicyApplied,PolicySkipped v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag one_output=false v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelCollector=opentelemetrycollector.kyverno.svc.cluster.local v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag otelConfig=prometheus v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profile=false v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profileAddress= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag profilePort=6060 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag protectManagedResources= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag registryCredentialHelpers=default,google,amazon,azure,github v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag renewBefore=360h0m0s v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag reportsServiceAccountName= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag resyncPeriod=15m0s v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag serverIP= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag servicePort=443 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_headers=false v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag skip_log_headers=false v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag stderrthreshold=2 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsKeyAlgorithm=RSA v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingAddress= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingCreds= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tracingPort=4317 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag transportCreds= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufMirror=https://tuf-repo-cdn.sigstore.dev v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRoot= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag tufRootRaw= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 vmodule=
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookRegistrationTimeout=2m0s
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerHost=
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookServerPort=9443
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/flag.go:335 > logger=setup/flag v=2 webhookTimeout=10
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/maxprocs.go:12 > setup maxprocs... logger=setup/maxprocs v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/memlimit.go:13 > setup memlimit... logger=setup/memlimit ratio=0.9 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/signal.go:16 > setup signals... logger=setup/signals v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowCARotation logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=UnlockWhileProcessingFIFO logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=WatchListClient logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=AtomicFIFO logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsPreferCBOR logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformers logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InOrderInformersBatchProcess logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=InformerResourceVersion logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=true feature=ClientsAllowTLSCacheGC logger=klog v=1
2026-10-02T02:35:40Z DBG cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/features/envvar.go:195 > Feature gate default state enabled=false feature=ClientsAllowCBOR logger=klog v=1
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/configmap.go:36 > create metrics-config-controller... logger=setup/metrics-config-controller v=2
2026-10-02T02:35:40Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/configmap.go:52 > done creating metrics-config-controller logger=setup/metrics-config-controller v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/metrics.go:27 > setup metrics... collector=opentelemetrycollector.kyverno.svc.cluster.local creds= exemplarFilter=trace-based logger=setup/metrics otel=prometheus port=8000 tlsSecretName= v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/configmap.go:15 > create config-controller... logger=setup/config-controller v=2
2026-10-02T02:35:40Z INF kyverno/cmd/internal/metrics.go:159 > Starting HTTP metrics server address=[]:8000 logger=setup/metrics v=0
2026-10-02T02:35:40Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:433 > defaultRegistry configured defaultRegistry=docker.io logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:449 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:458 > excludedGroups configured excludeGroups=["system:nodes"] includeGroups=[] logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:463 > excludeUsernames not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:471 > excludeRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:479 > excludeClusterRoles not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:495 > generateSuccessEvents configured generateSuccessEvents=false logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:501 > successEventActions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:525 > webhooks configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhooks="{\"namespaceSelector\":{\"matchExpressions\":[{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"kube-system\"]},{\"key\":\"kubernetes.io/metadata.name\",\"operator\":\"NotIn\",\"values\":[\"konflux-kyverno\"]}],\"matchLabels\":null}}"
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:539 > webhookAnnotations configured logger=config name=konflux-kyverno namespace=konflux-kyverno v=2 webhookAnnotations="{\"admissions.enforcer/disabled\":\"true\"}"
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:545 > webhookLabels not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:559 > matchConditions not set logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:580 > enableDefaultRegistryMutation configured enableDefaultRegistryMutation=true logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/pkg/config/config.go:595 > maxContextSize not set, using default default=2097152 logger=config name=konflux-kyverno namespace=konflux-kyverno v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/configmap.go:31 > done creating config-controller logger=setup/config-controller v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/registry.go:18 > setup registry client... insecure=false logger=setup/registry-client secrets= v=2
2026-10-02T02:35:40Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/imageverifycache.go:10 > setup image verify cache... enabled=true logger=setup/image-verify-cache maxsize=1000 ttl=1h0m0s v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/kube-client qps=100 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:60 > create kyverno client... burst=200 kubeconfig= logger=setup/kyverno-client qps=100 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:68 > create dynamic client... burst=200 kubeconfig= logger=setup/dynamic-client qps=100 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:84 > create apiserver client... burst=200 kubeconfig= logger=setup/apiserver-client qps=100 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:76 > create metadata client... burst=200 kubeconfig= logger=setup/metadata-client qps=100 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:92 > create the kyverno dynamic client... burst=200 kubeconfig= logger=setup/d-client qps=100 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:100 > create the events client... burst=200 kubeconfig= logger=setup/events-client qps=100 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/client.go:44 > create kube client... burst=200 kubeconfig= logger=setup/events-client/kube-client qps=100 v=2
2026-10-02T02:35:40Z TRC kyverno/cmd/internal/reporting.go:13 > setting up reporting... enableReporting= generate=false imageVerify=false logger=setup/setup-reporting mutate=false mutateExisiting=false v=2 validate=false
2026-10-02T02:35:40Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-02T02:35:41Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-02T02:35:41Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Secret v=2
2026-10-02T02:35:41Z TRC kyverno/cmd/internal/engine.go:62 > setup exception selector... enablePolicyException=false exceptionNamespace= logger=setup/exception-selector v=2
2026-10-02T02:35:41Z TRC kyverno/cmd/internal/engine.go:91 > setup config map resolver... enableConfigMapCaching=true logger=setup/configmap-resolver v=2
2026-10-02T02:35:41Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ConfigMap v=2
2026-10-02T02:35:41Z TRC kyverno/cmd/internal/engine.go:44 > setup engine... logger=setup/engine v=2
2026-10-02T02:35:41Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Deployment v=2
2026-10-02T02:35:41Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterPolicy v=2
2026-10-02T02:35:41Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Policy v=2
2026-10-02T02:35:42Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.UpdateRequest v=2
2026-10-02T02:35:42Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2beta1.GlobalContextEntry v=2
2026-10-02T02:35:42Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:208 > Starting metrics server logger=controller-runtime/metrics v=0
2026-10-02T02:35:42Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/metrics/server/server.go:247 > Serving metrics server bindAddress=:8080 logger=controller-runtime/metrics secure=false v=0
2026-10-02T02:35:42Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy source="kind source: *v1beta1.ValidatingPolicy" v=0
2026-10-02T02:35:42Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy source="kind source: *v1beta1.ImageValidatingPolicy" v=0
2026-10-02T02:35:42Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy source="kind source: *v1beta1.NamespacedValidatingPolicy" v=0
2026-10-02T02:35:42Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy source="kind source: *v1beta1.MutatingPolicy" v=0
2026-10-02T02:35:42Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy source="kind source: *v1beta1.NamespacedImageValidatingPolicy" v=0
2026-10-02T02:35:42Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:369 > Starting EventSource controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy source="kind source: *v1beta1.NamespacedMutatingPolicy" v=0
2026-10-02T02:35:42Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Namespace v=2
2026-10-02T02:35:42Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRoleBinding v=2
2026-10-02T02:35:42Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.RoleBinding v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.GeneratingPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedGeneratingPolicy v=2
2026-10-02T02:35:43Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:258 > Attempting to acquire leader lease... lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-02T02:35:43Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=kyverno-events v=2 workers=3
2026-10-02T02:35:43Z TRC kyverno/pkg/event/controller.go:125 > start logger=EventGenerator v=2
2026-10-02T02:35:43Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup name=global-context v=2 workers=1
2026-10-02T02:35:43Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/controllers name=policycache-controller v=2 workers=3
2026-10-02T02:35:43Z INF cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/leaderelection/leaderelection.go:272 > Successfully acquired lease lock=konflux-kyverno/kyverno logger=klog v=0
2026-10-02T02:35:43Z TRC kyverno/pkg/leaderelection/leaderelection.go:82 > started leading id=kyverno-admission-controller-c44dccd8c-blh4j logger=setup/leader-election v=2
2026-10-02T02:35:43Z TRC kyverno/cmd/kyverno/main.go:335 > MutatingAdmissionPolicy API is not registered, skipping MAP informers error="mutating admission policy API is not registered" v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.Lease v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicyBinding v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingAdmissionPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ValidatingWebhookConfiguration v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.MutatingWebhookConfiguration v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1.ClusterRole v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ValidatingPolicy v=2
2026-10-02T02:35:43Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.MutatingPolicy v=2
2026-10-02T02:35:44Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v2.PolicyException v=2
2026-10-02T02:35:44Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.ImageValidatingPolicy v=2
2026-10-02T02:35:44Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedValidatingPolicy v=2
2026-10-02T02:35:44Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedImageValidatingPolicy v=2
2026-10-02T02:35:44Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=controller-runtime/cache reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.NamespacedMutatingPolicy v=2
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedvalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedValidatingPolicy v=0 worker count=1
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedimagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedImageValidatingPolicy v=0 worker count=1
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=mutatingpolicy controllerGroup=policies.kyverno.io controllerKind=MutatingPolicy v=0 worker count=1
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=imagevalidatingpolicy controllerGroup=policies.kyverno.io controllerKind=ImageValidatingPolicy v=0 worker count=1
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=validatingpolicy controllerGroup=policies.kyverno.io controllerKind=ValidatingPolicy v=0 worker count=1
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:302 > Starting Controller controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0
2026-10-02T02:35:44Z INF cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.24.1/pkg/internal/controller/controller.go:305 > Starting workers controller=namespacedmutatingpolicy controllerGroup=policies.kyverno.io controllerKind=NamespacedMutatingPolicy v=0 worker count=1
2026-10-02T02:35:44Z TRC cachi2/output/deps/gomod/pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:507 > Caches populated logger=klog reflector=pkg/mod/k8s.io/client-go@v0.36.3/tools/cache/reflector.go:343 type=*v1beta1.PolicyException v=2
2026-10-02T02:35:44Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=admissionpolicy-generator v=2 workers=2
2026-10-02T02:35:44Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=exception-webhook-controller v=2 workers=1
2026-10-02T02:35:44Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=certmanager-controller v=2 workers=1
2026-10-02T02:35:44Z TRC kyverno/pkg/utils/controller/run.go:20 > starting ... logger=admissionpolicy-generator v=2
2026-10-02T02:35:44Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=webhook-controller v=2 workers=2
2026-10-02T02:35:44Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=celexception-webhook-controller v=2 workers=1
2026-10-02T02:35:44Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=status-controller v=2 workers=3
2026-10-02T02:35:44Z TRC kyverno/cmd/internal/controller.go:32 > starting controller logger=setup/leader/controllers name=global-context-webhook-controller v=2 workers=1
2026-10-02T02:35:44Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-02T02:35:44Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-02T02:35:44Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-02T02:35:44Z ERR kyverno/pkg/controllers/webhook/controller.go:464 > failed to get lease error="lease.coordination.k8s.io \"kyverno-health\" not found" logger=webhook-controller
2026-10-02T02:35:46Z INF kyverno/pkg/logging/log.go:180 > 2026/10/02 02:35:46 http: TLS handshake error from 10.128.0.2:57700: secret "konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair" not found logger=webhooks/server v=0
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=CREATE uid=d5d50498-d053-4a37-bd58-b0cda2a46660 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=CREATE uid=bd48de4c-b8ea-4630-8e4f-5a6d8b894954 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=CREATE uid=8b169b99-1a0c-4abc-9ac3-25a187463400 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=CREATE uid=0239b785-ee20-4442-88f7-c9e507ec82c8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=CREATE uid=a0524f78-c981-4ff0-a561-0be30d38a9b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=CREATE uid=0e23dc12-58bd-415c-980c-67442ae15430 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=CREATE uid=5037ca19-0596-421c-a409-d6ef969386c5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring uid=133605e6-6c57-4fbb-b898-43102088a38d v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=CREATE uid=792a75a5-581e-4351-b5fb-406fc08ade98 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-olm uid=91d61ab4-b883-49c9-8bb5-cf67dbbcec2b v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-rbcm uid=9c6879a8-2df2-47ed-b7b3-95092925aec0 v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-olm type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-rbcm type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace uid=7af5bacb-1883-40a0-8be9-450b3e6e963b v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress uid=6b34be58-b7dd-498f-9aec-e853e2cc104f v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=CREATE uid=0a43116f-86b9-4a97-bd54-c81b27da7f94 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole uid=ee7d4162-b095-47f8-98fa-7df092976e04 v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-kubearchiveconfig type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-kubearchiveconfig uid=720ef2b4-e559-489c-bb94-34270a1eda10 v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=init-ns-integration type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=init-ns-integration uid=c0fca995-1e4c-4d4a-9ce9-b99cbd0fc29a v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-generate-konflux-viewer-access uid=010c10f8-7dbd-45a4-94ba-7733b5e5ebd2 v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-generate-konflux-viewer-access type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=CREATE uid=8c6214af-94ba-49d9-ae8c-748f61b122a4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-sysauth-releng type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-sysauth-releng uid=9e39d227-f924-427e-a6fe-dae23afad7b7 v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=CREATE uid=7a89d07c-a276-46ec-ba4f-9cf08a554411 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=konflux-rbac-validate-restrict-binding-system-authenticated uid=88355d3e-517b-4eef-b278-e7b4c2e4fe91 v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=konflux-rbac-validate-restrict-binding-system-authenticated type=ClusterPolicy v=2
2026-10-02T02:40:05Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-sysauth-releng\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-sysauth-releng status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-02T02:40:05Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"konflux-rbac-validate-restrict-binding-system-authenticated\": the object has been modified; please apply your changes to the latest version and try again" name=konflux-rbac-validate-restrict-binding-system-authenticated status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=CREATE uid=23e0b3e2-02aa-470f-a9f4-b8dd04c7426f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=CREATE uid=1587cb78-00d3-4d78-b766-57910795408e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=CREATE uid=6456e741-ff59-4753-99b7-e5c37ca9ab86 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-docker-io-images type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-docker-io-images uid=81b96806-d9b5-4329-8a27-f175938938ef v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=restrict-binding-system-groups uid=e5d23794-020d-43d9-88fe-4a589deb7b7f v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=restrict-binding-system-groups type=ClusterPolicy v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=tekton-taskrun-resource-policy uid=cd64068f-d9ab-40f2-8822-486b7532beef v=2
2026-10-02T02:40:05Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=tekton-taskrun-resource-policy type=ClusterPolicy v=2
2026-10-02T02:40:05Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-docker-io-images\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-docker-io-images status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-02T02:40:05Z ERR kyverno/pkg/controllers/admissionpolicygenerator/controller.go:296 > failed to update cluster policy status error="Operation cannot be fulfilled on clusterpolicies.kyverno.io \"restrict-binding-system-groups\": the object has been modified; please apply your changes to the latest version and try again" name=restrict-binding-system-groups status={"autogen":{},"rulecount":{"generate":0,"mutate":0,"validate":0,"verifyimages":0},"validatingadmissionpolicy":{"generated":false,"message":"skip generating ValidatingAdmissionPolicy for non CEL rules."}}
2026-10-02T02:40:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=2ff568c8-3d7d-4f1d-aa6b-d6ceabcf3270 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=e55c4d02-3767-462a-811d-96f21d833cf5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:06Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=f283a043-a070-4111-86f5-3a0b59e21b78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=3e8c9487-7cf6-421e-8697-79658a8ebd74 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=fac91450-9ab6-4ecf-bbf1-43075a497f67 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=2a85df96-f4c6-4d5d-a61f-bf812a7a6245 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=4788b3ff-aec7-4c9b-a0f1-2986d7a8ffa5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=1baa06ea-451a-42be-ab69-8c556e197f45 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=fb8993a0-4291-4fb8-a352-7f5eed0fc9eb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=c44c1022-46b4-457a-bea4-11de27f37caa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=2e22b45b-4f49-4900-827e-bcdbb96e81d7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=1b7c85f8-9ce5-4158-b246-7a86090925ee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=5cdb321c-95a8-408d-80b1-69030ab5e985 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=90803201-93ba-431e-92dd-a87e659a2607 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=b61470a2-7b42-4a61-8d1d-b3cba4152168 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=20eacb15-8377-4332-a207-7d22c5b40327 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:09Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=47ae0a8d-6498-468e-9778-c51186d1e250 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=6414646d-6e83-4e7c-9702-59d442c0f502 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=10e9aa5e-a8f7-49d1-8495-9524efacb40b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=e58d309b-210a-4f56-ae13-b03e13cd6cae user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=dfee762b-0042-4f42-9cda-921f8027c493 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b34e2d9f-2a13-4854-81ea-bbab3fb1b2f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=48572c88-b064-45f0-b351-9d74c8067ba1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=4c7125e4-cbb8-42dc-871f-04fc8ee3b652 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=531f1f98-d390-4ba8-b4f8-0cd96cb0def3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=575f429c-b53e-40fd-8e41-b630bb917b28 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=84886b25-b960-4404-9e48-71047f41eb87 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=609c0394-4964-48ca-8728-4699fd0467ba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=fdf03157-c280-48e2-9df3-0ff964a6584d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=78069b0a-89e6-418a-9439-6302908d761f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=b13cef1a-4a32-4c45-b183-e55ad01df7c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=b4e1432e-8935-4d27-b0b5-e6b61fe009f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=33566981-08ab-488c-8d71-f2928dda4b9c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=606b28fd-7083-41fd-9226-76c2f302079e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:11Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=f02d1ead-f79e-4d7b-9e5b-2cb8b76c7ca3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=b45d0548-ea92-4afe-b581-f86463f60787 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=4c879fbd-a9e0-484d-b579-ad20abba53ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=0c6249d9-a847-48ab-8c56-0ffda3042320 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=18bcfc24-1a9d-4ed4-a43d-e82be055082e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=cdf14608-3838-45e5-868a-8436f72a33ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=25b6710e-6ff3-4660-87ff-370a16650e32 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=4133c1e7-73a8-4237-9612-97d6ca35ac13 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=a99d690e-f47a-4f88-82ee-0e12fa4a03ea user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=8bc4473c-3e91-4121-a335-02237b8a8a50 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=35b63bb2-3069-44be-8778-a34c66720ff7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=002c048d-d7c0-41d9-b918-9c17cf0f5748 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=58cc465e-89a3-467b-9e50-94b6e3205ce5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=c64a788f-e943-4c66-913a-a863af98e549 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=8d755b2e-b059-481b-9064-405829782a50 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=25c47388-098b-4010-8a45-020d4c63411a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=cdc21a53-0259-4ebb-8ffb-145592c414a0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=206d5f22-f29f-4a35-a6fa-22927cd5781b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:13Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=b1ad3e3d-49f8-4bfd-87bf-5b87d34aa3e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=c9606a40-8b5e-4873-babe-d4e6a5eb1019 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=cf33d07a-eba1-40a4-a739-b45388a7d25f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=e568eca0-3b93-4348-9d68-4534cfbf9934 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=592a35c6-e4fa-4cb2-934c-153fcf382477 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=4a964db7-608e-4f9e-9bcb-c4cc703d6175 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=c60b1b6d-1db6-4d9a-8048-12553001c7f8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=3adc6427-cac7-47b2-8661-0a41c90df3da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=3ffeb224-0a94-4202-8c6e-80a92cd7ac04 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:15Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=77cdcf96-f085-4ca5-83ac-8e650b88597b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a04934ea-7390-4026-a410-98bd78fe35b6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=ce32a398-d59d-4137-89d8-25bb81be374c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=47d76487-077a-4f10-8294-4f588af5708d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=b35ec335-e7c5-4f4a-b9ea-251f5642be5c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4a1e7ceb-c675-4257-a944-10d6ec5e353c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=c0fdf63e-a6e8-4fb9-bdbe-2abb35217edf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=4061f791-4d26-4364-adc9-421dc151326a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=611d2744-0952-4ae7-b2d7-f2fba3d1ccf7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=f8665446-394b-4754-8f8f-3a6541d41760 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:16Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=8ad3d6ba-72be-45a0-b72c-de325d68be45 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=0b23c0a1-bd43-44ea-8430-c4ee2b36e6e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=1d20ded4-f416-4bd2-84c3-261595b4a6dc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=d08df672-ab77-492c-89c8-303c771eba15 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=5a1347e3-9022-4abf-ad62-510d68f1b85c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=c1bb2c56-7819-408e-ba44-6cb3b7640d89 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f066a21d-43ba-41fb-a404-e23937129139 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=bc0251a8-7f1b-44cc-928f-beaa63f31110 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=368877bc-aafc-45b0-8def-26bb7a29327b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=27e3e902-1ab5-445c-9b67-bb094fdcf8f3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=cbc68fe5-7f8b-48b1-ac36-de9e05b0d1ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=02f7d57f-8df9-4627-8f4d-7141912e1bbb user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=10f7e886-4556-4bf8-b660-8ffeb558cfb2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=28638fe4-f956-469e-aab6-d782723c55b1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:17Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=8e6c20b3-b9ad-491c-8313-f184500c0b08 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=fa247667-31c7-4c2a-86dd-e646b095d546 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=b27a80ac-f696-47f0-89f1-491e523c4e9b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=5ede60d5-a180-4b28-b767-15a29998c398 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=f0dff396-91b1-431b-8217-960741000641 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=82e36e48-3720-4a86-a311-89ac7107f33f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=31c9b625-a047-4b2d-a035-9d01ce2110a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=54f2c1b4-c7e6-48d2-8856-38158ee07745 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=0040b95b-f16f-456f-8656-412b6c1c8d46 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=bdff3ef9-05e2-4835-bd86-033d5a1cd793 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=67e3f980-6d3f-41af-bac3-26194f1234f5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:18Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-zgnj8 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-zgnj8 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5d73d57f-34ad-4227-9ca2-40f3cd3c2be2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d1119710-9252-4cf3-bd6d-1ba946e840a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ec7c68f2-6704-4f67-8371-b14cd60ca81d","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-02T02:40:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=40fdd33d-f19e-4360-b007-749882835430 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=5f0bd343-2385-4d19-b16d-7caa34f32ac7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=11e97596-73b8-4ba2-a99a-6b0923d67d85 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=421c5820-612c-4141-a627-ed40986800bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=6ca7a517-20b4-40d0-89c5-21d12414dd73 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=7339cb04-2ab4-41de-b209-ec1068dc5c98 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=c44bc0f9-8010-4319-84f9-e0562228d997 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f4005170-8e57-42b3-b3f7-153c955dd299 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=083c4925-fbf7-44ed-819e-148d4acca93b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=57b65a2e-2567-4fe8-a08b-909e56407213 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=91b6590d-a507-4363-a0bd-3bc0fb569563 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=14b71f59-29c7-4b8a-9348-ff6828850468 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=b94e02c9-0d01-4c83-b103-b6bc782c5084 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=1415f959-c5bc-443b-9703-85df29efb2f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=164b1a6d-dc9e-4cfb-9ae1-6183af36dd16 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=3fffe6f3-f1b5-4dee-ab89-c5d62853fb15 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=e5ea283c-5e62-481e-90ec-a820dd13f195 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=db8e38c8-3c08-4026-83fe-633d478cfbed user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=a8685187-567f-4e70-9984-3ce98f245803 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=a0c3e183-1982-46a9-835f-1a10a4e70eec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c63037b8-4919-46a5-afc1-56d02bfcf5c2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=cc03925b-3035-4240-ad84-4ef9cbd9027d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=8648f6bb-5b19-4f29-9358-7dad22498397 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=e8990f6a-6aeb-43c5-9a91-fb5c8973c8aa user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f3b52b88-0b24-4202-a548-2301bf622a47 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=f32c9ae8-47a8-499e-9105-10f4d26ee69e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=61ea6d50-ec68-49df-909a-7ed2d37cdd8a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=de612578-3e08-4978-92f1-40070b8fa1ef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=CREATE uid=f6fa1f35-4d2b-4b5e-9bc5-32c16ac645cd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/controllers/generic/logging/controller.go:45 > resource added logger=setup/cluster-policy name=bootstrap-tenant-namespace-queue type=ClusterPolicy v=2
2026-10-02T02:40:20Z TRC kyverno/pkg/controllers/admissionpolicygenerator/cpol.go:12 > policy created kind=ClusterPolicy logger=admissionpolicy-generator name=bootstrap-tenant-namespace-queue uid=b02f005d-e8a9-438c-8095-7078f6451284 v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=ef793c68-a158-4f41-b7ba-76231d667a5b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=4d45c786-70a7-4f3a-a84e-e1b8763ced19 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=8a65ca64-3c91-4484-ad2e-9ecb70accfde user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=1e578f2e-b775-4584-a7c8-ff4760df2013 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=135c8d9e-7d97-442a-be4b-8b044e2a5b3d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=40aa514c-bc2c-489e-8a56-d471759eb8c1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=86049413-00d6-41a5-9ba8-f3b8e776dcf3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=160b1bcd-134b-48f0-99be-a1f23a8df24e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=6e9140e4-c81c-408c-b902-5d6a5e97ad02 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=b9c8fbf1-6ba9-43a4-85b9-438a56dee05b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=f5ee7a2f-3c23-40dd-9315-62f7330a8983 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=08348b05-555f-4be5-a4fa-b9a12f52f5d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=2c512bd3-5746-49d6-a159-3d27ebfb8b0c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=88dd6966-4b61-4577-baf4-6f399380649b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=fca7fc00-d1fe-4c07-b2aa-c1a5a979faff user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:23Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["appstudio-openshift-gitops-argocd-application-controller","basic-user","cluster-status","console-extensions-reader","crd-manager-for-has","crd-manager-for-integration","crd-manager-for-project-controller","crd-manager-for-release","helm-chartrepos-viewer","openshift-gitops-apply-tekton-config-parameters","openshift-gitops-jobs-admin","openshift-gitops-openshift-gitops-argocd-application-controller","openshift-minio-apply-tenants","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=create-velero-bucket namespace=openshift-adp operation=CREATE policy=restrict-docker-io-images resource=openshift-adp/Job/create-velero-bucket resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","build-templates:openshift-gitops-argocd-application-controller","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-gitops:openshift-gitops-argocd-application-controller","openshift-operators:tekton-operator-info","openshift-pipelines:openshift-gitops-argocd-application-controller","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=80a9663f-c42d-4f2f-99a3-fc0648ce32dd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:23Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=create-velero-bucket-kz5h5 namespace=openshift-adp operation=CREATE policy=restrict-docker-io-images resource=openshift-adp/Pod/create-velero-bucket-kz5h5 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=be3d9ffb-bf70-417b-8536-97dc7e43938f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ad5efa68-8e82-4fe9-9808-8863bbdce63e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"55c064a3-d18b-449e-8d3b-17e1aef42017","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=62c5db88-0280-4b09-8327-5de3a22e733b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=8d0806b9-8b89-4b64-b00e-47bc84d1eb36 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=4441be8b-a078-4c9a-8643-0f180cb4a298 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=a2f49acf-93d3-4b0b-85a2-b783a7146bdf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=0324f001-c605-49d8-8977-fef4a9cb3111 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=27ce9048-c009-4ad7-83a4-c771be103aba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=6c6a03e3-051c-4673-ae62-f943d3b1fa21 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=6b2679f7-fc0f-4470-9463-2df6ab6dd483 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:24Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=e5b089c7-7be5-4a4f-8312-a854a35d3a67 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=ade49c1c-6bc3-4d93-8a33-cc9a3e6ff800 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=ebca94df-1b32-4b2f-becc-81398a9201d0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=693667ea-8c8b-4a5a-b126-03659a8530b2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=51ef5485-4d35-445c-9bb0-fa58132a4bba user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=96bbcc8c-acbc-4b05-b467-f5cc3442166b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=a3a00ee9-2b95-498a-acc3-a74eb28a6984 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=29907725-2722-4a13-82a1-9e6382b877a3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=406d8af1-5408-4aa0-8b96-322d7c70aae4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=0843c15f-9158-4340-aac4-9fb084607e55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=bae26a09-b011-42ac-8d6b-4bb858ad2d64 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=b3009a68-b4af-41b3-8fad-3781da382736 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=0a062a77-c6c6-412b-8410-87376a7d2901 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=74f34d20-b909-475f-9f37-974978e2d37d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=bb8612e7-c469-4d53-9eb6-e96f1aa16e4c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=9306c265-83f9-4948-82fa-7bd8b17c1ca4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=c81f234d-a860-44bb-89c6-0f9b30d5d3ce user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=595188ab-9ce1-423d-9e61-7232f2722ba5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=3e195de5-e961-40d2-a505-c9fe6667ef1e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=c178eddb-0fb1-4484-8aac-ceec030afff2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=83d14edc-70f4-4c5a-a907-0734ef7e01e2 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:25Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=30d22095-7438-4114-b99b-4a751d4948d9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=338645e7-5b57-44a4-9528-7214b23067f7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=861db2e0-07f3-4f5e-b761-936ae198f150 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=8b0c7ec2-2799-4eb7-9ebf-3c27ef049503 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=a2caaf12-ec90-4824-b23d-ba319a9af797 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=09460d7f-e648-4b30-a97c-26322f486d78 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=ba6f88bc-c9a4-432a-8339-5ec8418f50b8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=355929b1-23bc-4fa7-9806-37b0e57e4fb1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=7ac5c15b-fa5a-484e-935e-83f85113a8e4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=b691468c-ca28-4689-aa54-50c43e802519 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=569df26f-7ae8-47fd-9c3c-4cd86a206846 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=80d14a71-0cf3-46cc-841b-e0519b2522bc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=02500750-4dfa-4b87-b8cd-680e11e21cca user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=717e5c6d-075e-4561-a541-7e2313353d59 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=4276f67b-620b-46ff-9758-7cac7fffb698 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:27Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=0d471fa3-62bf-4fcc-8a8f-303ccce404da user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:40:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","oadp-operator.v1.5.8-nsaeKfnAKL3p35Znw437DJUhmMOSCmFuO6Ovb","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:image-puller","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=Deployment" gvr="apps/v1, Resource=deployments" kind=Deployment logger=webhooks/resource/validate name=velero namespace=openshift-adp operation=CREATE policy=restrict-docker-io-images resource=openshift-adp/Deployment/velero resource.gvk="apps/v1, Kind=Deployment" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-adp:oadp-operator.v1.5.8","openshift-adp:oadp-operator.v1.5.8-ope-9at09wTifSrhuFFQLlpjsFkvpLL9pTQ9UnsFbs","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=607860fc-639a-420e-bd8b-efcd85127a48 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ccfc6460-b68a-4d43-ba8d-e3562ebc17ee"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-adp-controller-manager-74bfcbcb77-jtnlj"],"authentication.kubernetes.io/pod-uid":["bda542bf-4571-425f-9e73-bd5b18162fd4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-adp","system:authenticated"],"uid":"42e0b94d-8ed0-4a8f-a590-a1e84f12fc08","username":"system:serviceaccount:openshift-adp:openshift-adp-controller-manager"} v=2
2026-10-02T02:40:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=velero-5c989444b6-bx8md namespace=openshift-adp operation=CREATE policy=restrict-docker-io-images resource=openshift-adp/Pod/velero-5c989444b6-bx8md resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=1270fef7-caee-4be7-b8b0-00c2d5637fcf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d1119710-9252-4cf3-bd6d-1ba946e840a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ec7c68f2-6704-4f67-8371-b14cd60ca81d","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-02T02:40:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","oadp-operator.v1.5.8-nsaeKfnAKL3p35Znw437DJUhmMOSCmFuO6Ovb","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:image-puller","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="apps/v1, Kind=DaemonSet" gvr="apps/v1, Resource=daemonsets" kind=DaemonSet logger=webhooks/resource/validate name=node-agent namespace=openshift-adp operation=CREATE policy=restrict-docker-io-images resource=openshift-adp/DaemonSet/node-agent resource.gvk="apps/v1, Kind=DaemonSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-adp:oadp-operator.v1.5.8","openshift-adp:oadp-operator.v1.5.8-ope-9at09wTifSrhuFFQLlpjsFkvpLL9pTQ9UnsFbs","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=49c6f49c-6503-4daf-9210-a9a0279cc020 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ccfc6460-b68a-4d43-ba8d-e3562ebc17ee"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-adp-controller-manager-74bfcbcb77-jtnlj"],"authentication.kubernetes.io/pod-uid":["bda542bf-4571-425f-9e73-bd5b18162fd4"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-adp","system:authenticated"],"uid":"42e0b94d-8ed0-4a8f-a590-a1e84f12fc08","username":"system:serviceaccount:openshift-adp:openshift-adp-controller-manager"} v=2
2026-10-02T02:40:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:daemon-set-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=node-agent-848kc namespace=openshift-adp operation=CREATE policy=restrict-docker-io-images resource=openshift-adp/Pod/node-agent-848kc resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=08a7bba3-4f5f-4a90-803a-a1947f01b635 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7f56ee1-3643-4283-82b4-386877889c1f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"b6592e9c-533f-41e7-89b8-bce8d376cb59","username":"system:serviceaccount:kube-system:daemon-set-controller"} v=2
2026-10-02T02:40:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:daemon-set-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=node-agent-dcmpp namespace=openshift-adp operation=CREATE policy=restrict-docker-io-images resource=openshift-adp/Pod/node-agent-dcmpp resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=61443002-f084-485c-a9bb-f6c6fe5e1d4d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7f56ee1-3643-4283-82b4-386877889c1f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"b6592e9c-533f-41e7-89b8-bce8d376cb59","username":"system:serviceaccount:kube-system:daemon-set-controller"} v=2
2026-10-02T02:40:31Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:daemon-set-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=node-agent-cvldg namespace=openshift-adp operation=CREATE policy=restrict-docker-io-images resource=openshift-adp/Pod/node-agent-cvldg resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=642e5306-a075-46bb-b146-1f096b642767 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7f56ee1-3643-4283-82b4-386877889c1f"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"b6592e9c-533f-41e7-89b8-bce8d376cb59","username":"system:serviceaccount:kube-system:daemon-set-controller"} v=2
2026-10-02T02:44:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=3bd8587d-23b2-4247-b936-ac460174b2b5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=2c499d8c-747d-4cc1-8198-2f6fc1728cd1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=0df7ba38-3e37-4d6e-badb-968b528ed89e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=d6318fcc-8b50-4edb-a4c9-139a865fa7be user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=0bd058ae-12da-4f0d-be8c-40fe8973d04f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=45db44c1-29b8-40d5-911c-f810cf76c594 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=422ab50e-3c0c-45a4-aa94-37d4263c486b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:21Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=e83b61bd-234d-4e7f-ba02-bba3deb46060 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=7e51f27a-9975-4948-96c1-c80672c2684f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=03443224-fa5e-4749-bc1a-977ebc9e81bd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=81f248f6-66a2-448f-92de-1449964ad14f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=4467f1ab-217b-4560-86a6-e9063ae60948 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=09749504-7def-40f9-9169-9f21f044809a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=34951a36-1fd4-420a-b7d2-b0ba759421f6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:44:22Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=5760e186-34bd-4335-9c94-dda1404d8313 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:45:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29848485 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29848485 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=07462048-f0b4-4283-b8e3-8d3787215c47 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=55162efb-87c0-4d12-ac59-c316c2fd44c0"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"20cf3252-1c8b-4b80-9569-c598439aef2e","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T02:45:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29848485-s2q6w namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29848485-s2q6w resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=92b0fb8d-0b21-489b-b1e3-0e51518d4aa4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ad5efa68-8e82-4fe9-9808-8863bbdce63e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"55c064a3-d18b-449e-8d3b-17e1aef42017","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:45:44Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="apps/v1, Kind=StatefulSet" gvr="apps/v1, Resource=statefulsets" kind=StatefulSet logger=webhooks/resource/validate name=affinity-assistant-d102a1253c namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/StatefulSet/affinity-assistant-d102a1253c resource.gvk="apps/v1, Kind=StatefulSet" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=e2642dd2-fe5b-40d0-b2ec-fdb8ab2ff9ed user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:45:45Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:statefulset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=affinity-assistant-d102a1253c-0 namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/affinity-assistant-d102a1253c-0 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=3ff4f69f-f9d8-4c25-a481-922dc9706ee1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=10347364-2224-4795-97bb-96f8c9a7efb3"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"dcd0d2c5-a0ad-4449-b5eb-dbce4eea9234","username":"system:serviceaccount:kube-system:statefulset-controller"} v=2
2026-10-02T02:45:45Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-gimbhrnxzz-init-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/buildah-demo-gimbhrnxzz-init-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=5c4b2fb2-ea59-4440-bccd-fe37985bb0ef user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:46:01Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-gimbhrnxzz-clone-repository-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/buildah-demo-gimbhrnxzz-clone-repository-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=91af82c4-eb5e-4468-96a5-5c5adac28e55 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:46:04Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-fxgp6 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-fxgp6 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=685d2ec6-761b-43ca-83b0-35c3204620cf user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d1119710-9252-4cf3-bd6d-1ba946e840a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ec7c68f2-6704-4f67-8371-b14cd60ca81d","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-02T02:46:22Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-gimbhrnxzz-prefetch-dependencies-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=ccdb02ee-a57c-4f46-956d-d90ea8da1747 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:46:22Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=buildah-demo-gimbhrnxzz-prefetch-dependencies-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f8ba124c-019d-4733-a93d-a4a075f738b9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:46:22Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-gimbhrnxzz-prefetch-dependencies-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/buildah-demo-gimbhrnxzz-prefetch-dependencies-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b50e5ffa-39db-479e-9614-b7af1d265357 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:46:37Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-gimbhrnxzz-build-container-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/buildah-demo-gimbhrnxzz-build-container-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=41791c4a-854c-4e72-b2e9-15babbf9c767 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:48:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-rxv7d namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-rxv7d resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=11523638-0b08-4eec-9ec8-ee048d05f69f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d1119710-9252-4cf3-bd6d-1ba946e840a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ec7c68f2-6704-4f67-8371-b14cd60ca81d","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-02T02:48:49Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-gimbhrnxzz-build-image-index-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/buildah-demo-gimbhrnxzz-build-image-index-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b299f838-1886-4b9d-8df7-b8fb1746ffb5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:49:35Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-gimbhrnxzz-apply-tags-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/buildah-demo-gimbhrnxzz-apply-tags-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=496b6d76-8c9e-4a25-b978-d9851d98e5df user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:49:35Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=buildah-demo-gimbhrnxzz-push-dockerfile-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/buildah-demo-gimbhrnxzz-push-dockerfile-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=c15cfbfc-c88e-49d2-a432-77046fa44d79 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:49:48Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b6a39c6756d206c93f578291ddc67f13-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a5ab1fe8-3599-48d3-aae1-1958e99c1edc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:49:48Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-b6a39c6756d206c93f578291ddc67f13-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=eef80ae7-f2d7-4242-9548-8e4244ca9f6d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:49:48Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-b6a39c6756d206c93f578291ddc67f13-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-b6a39c6756d206c93f578291ddc67f13-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=3d7e370e-b7c9-407e-a711-67f9a89d833e user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29848490 namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Job/osd-delete-backplane-serviceaccounts-29848490 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=94af76c6-3c78-4f77-a01b-6f5377b4333a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=55162efb-87c0-4d12-ac59-c316c2fd44c0"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"20cf3252-1c8b-4b80-9569-c598439aef2e","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T02:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:cronjob-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="batch/v1, Kind=Job" gvr="batch/v1, Resource=jobs" kind=Job logger=webhooks/resource/validate name=pipelines-vacuum-29848490 namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Job/pipelines-vacuum-29848490 resource.gvk="batch/v1, Kind=Job" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=2425c3d7-17d7-4970-9bda-7765ced0c9c4 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=55162efb-87c0-4d12-ac59-c316c2fd44c0"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"20cf3252-1c8b-4b80-9569-c598439aef2e","username":"system:serviceaccount:kube-system:cronjob-controller"} v=2
2026-10-02T02:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=pipelines-vacuum-29848490-v79vd namespace=product-kubearchive operation=CREATE policy=restrict-docker-io-images resource=product-kubearchive/Pod/pipelines-vacuum-29848490-v79vd resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=b1e8795e-13b3-45bb-86f4-df442b9b49dc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ad5efa68-8e82-4fe9-9808-8863bbdce63e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"55c064a3-d18b-449e-8d3b-17e1aef42017","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:50:00Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:job-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=osd-delete-backplane-serviceaccounts-29848490-mwm7f namespace=openshift-backplane operation=CREATE policy=restrict-docker-io-images resource=openshift-backplane/Pod/osd-delete-backplane-serviceaccounts-29848490-mwm7f resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=f5547834-e1f5-4e69-9690-f5819acaf3f0 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ad5efa68-8e82-4fe9-9808-8863bbdce63e"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"55c064a3-d18b-449e-8d3b-17e1aef42017","username":"system:serviceaccount:kube-system:job-controller"} v=2
2026-10-02T02:50:16Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-60f16864b347481d41f7b710f251f75c-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=0439e4f5-03ab-44ff-bc39-34c30149cd06 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:16Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-60f16864b347481d41f7b710f251f75c-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=250c59a8-cb31-4010-af8d-ccd0d95cb4d6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:16Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-60f16864b347481d41f7b710f251f75c-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-60f16864b347481d41f7b710f251f75c-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=95749900-1e23-4bd4-957e-af964344184c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=bootstrap-tenant-namespace-queue namespace= operation=UPDATE uid=02c7390c-4626-477b-8880-7f3be6a29e27 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpmonitoring namespace= operation=UPDATE uid=a9495967-a8f2-42c8-b8e4-d2b75060689b user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-olm namespace= operation=UPDATE uid=28e3b0eb-06a6-4f73-9963-66a433762d5c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-binding-system-groups namespace= operation=UPDATE uid=af07a3ab-e635-4371-894c-142fe7a0702f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-integration namespace= operation=UPDATE uid=99c23e37-acdc-4b86-b087-53d5a52eaca1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpingress namespace= operation=UPDATE uid=8da2c464-74af-47e9-8d56-dea04241d147 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-samenamespace namespace= operation=UPDATE uid=fb600edc-5b37-42ec-9a27-0645ee2de570 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-system-authenticated namespace= operation=UPDATE uid=c1bfdc3a-df5e-4015-b0bc-7c7d2f3f86f8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=restrict-docker-io-images namespace= operation=UPDATE uid=f9a0c320-355f-42a5-b242-e6ae6323de49 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=init-ns-kubearchiveconfig namespace= operation=UPDATE uid=99aa7398-4aad-43ef-bed6-b61d124328ec user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:19Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-generate-konflux-viewer-access namespace= operation=UPDATE uid=bac32618-ee61-4f5e-a29e-9dceb41be65f user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-rbcm namespace= operation=UPDATE uid=650caf4e-e737-453a-b2b0-2fde8e3de9dc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-bootstrap-tenant-namespace-np-ocpconsole namespace= operation=UPDATE uid=c670d8f2-738c-4d36-986b-c81e3caf98a7 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=konflux-rbac-validate-restrict-binding-sysauth-releng namespace= operation=UPDATE uid=894dfb1b-9391-434f-ac4e-268d9ca1bfab user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:20Z TRC kyverno/pkg/webhooks/policy/handlers.go:99 > kyverno.io/v1 ClusterPolicy is deprecated and will be removed in a future release; migrate to ValidatingPolicy, MutatingPolicy, GeneratingPolicy or ImageValidatingPolicy (policies.kyverno.io), see https://kyverno.io/docs/guides/migration-to-cel/ gvk="kyverno.io/v1, Kind=ClusterPolicy" gvr="kyverno.io/v1, Resource=clusterpolicies" kind=ClusterPolicy logger=webhooks/policy/validate name=tekton-taskrun-resource-policy namespace= operation=UPDATE uid=3f7b0ca6-79f0-4c8c-8086-8d915ff484f1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=ca166488-2b97-4236-a9e6-6ae34ac4e954"],"authentication.kubernetes.io/node-name":["ip-10-0-160-65.ec2.internal"],"authentication.kubernetes.io/node-uid":["04a7da3e-24f8-44ad-885e-cc2e6c9dffd5"],"authentication.kubernetes.io/pod-name":["openshift-gitops-application-controller-0"],"authentication.kubernetes.io/pod-uid":["50378965-ab01-4b54-8ab3-268e3bbdcb0b"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-gitops","system:authenticated"],"uid":"5d6ccaca-e199-4c89-85c0-25747844f5d7","username":"system:serviceaccount:openshift-gitops:openshift-gitops-argocd-application-controller"} v=2
2026-10-02T02:50:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:controller:replicaset-controller","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-chains-public-key-viewer","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-result-read-role","tekton-results-route-view"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=tekton-pipelines-webhook-788dfd9b96-8jtk2 namespace=openshift-pipelines operation=CREATE policy=restrict-docker-io-images resource=openshift-pipelines/Pod/tekton-pipelines-webhook-788dfd9b96-8jtk2 resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=d00a7a39-0cef-4d00-ac0e-65c95b4fb392 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d1119710-9252-4cf3-bd6d-1ba946e840a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:kube-system","system:authenticated"],"uid":"ec7c68f2-6704-4f67-8371-b14cd60ca81d","username":"system:serviceaccount:kube-system:replicaset-controller"} v=2
2026-10-02T02:50:39Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-038e8cde74ddb83412a36e40254caa81-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=acf47c98-a6ed-4993-9801-3cb40585b495 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:39Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-038e8cde74ddb83412a36e40254caa81-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=95196aca-556b-4057-948d-fe0ef8bbee95 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:39Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-038e8cde74ddb83412a36e40254caa81-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-038e8cde74ddb83412a36e40254caa81-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=eb7dd654-67a9-4ed5-a655-4bba88aedbe1 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:53Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-518c94f430b31834e27708b79a668a83-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=40297078-8752-43af-b63a-cb0bbcd35aa8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:53Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-518c94f430b31834e27708b79a668a83-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=f180247c-a90a-4714-9287-8c1071ba656a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:50:53Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-518c94f430b31834e27708b79a668a83-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-518c94f430b31834e27708b79a668a83-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=712d2f14-274b-4bf2-b606-9ebf44bbae22 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:05Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-71e577c254ffbdc05827bd1a627574fd-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=5654ce24-d311-410a-87b1-cb24c5da8225 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:05Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-71e577c254ffbdc05827bd1a627574fd-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=7d12f069-b3ae-439a-9945-12fd3d1d94b6 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:05Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-71e577c254ffbdc05827bd1a627574fd-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-71e577c254ffbdc05827bd1a627574fd-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=9d4ec0ce-3144-40e3-8a53-c7b342e9e169 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:20Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-396dc67dc240a5e2d604cbe39ee7f8ca-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=1729910e-fca3-4818-bea5-0d5458497ac9 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:20Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-396dc67dc240a5e2d604cbe39ee7f8ca-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=a1db9a22-eb51-4300-bd28-b43e636ffc88 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:20Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-396dc67dc240a5e2d604cbe39ee7f8ca-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-396dc67dc240a5e2d604cbe39ee7f8ca-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=52f516e4-e6d9-48c3-a84b-8643456f40ee user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-9f9536de34ffbce56c304697ec16813a-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=0d8f8d88-7dc1-42c6-9ba0-e8cd3f39ebc3 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:41Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-9f9536de34ffbce56c304697ec16813a-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=4f21f340-54d2-460e-ab46-ede133e31ccd user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:51:41Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-9f9536de34ffbce56c304697ec16813a-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-9f9536de34ffbce56c304697ec16813a-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=694e1498-2efd-4f7a-84d5-3259c3c7c6e8 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:52:07Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-a93cdc38fcb5cc09dbc6d1c0a788b2fa-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=19890a26-c22b-4cde-b3fb-1ce0338a08dc user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:52:07Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-a93cdc38fcb5cc09dbc6d1c0a788b2fa-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=42207751-ad58-4c9f-824b-c6e1f1efa32a user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:52:07Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-a93cdc38fcb5cc09dbc6d1c0a788b2fa-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-a93cdc38fcb5cc09dbc6d1c0a788b2fa-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=cc8668a1-5c0a-4077-aa0c-ccc430830bf5 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=0b4f40f6-8db9-4e92-bbeb-5a9ba9d7ea30"],"authentication.kubernetes.io/node-name":["ip-10-0-143-80.ec2.internal"],"authentication.kubernetes.io/node-uid":["eb7aa97f-57e8-4fc0-80ff-d3579033bde4"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-1"],"authentication.kubernetes.io/pod-uid":["9063001a-3c26-4b3c-836e-fd32930de655"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:52:23Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-74e6a53cf4ed2a759d160fef66d31007-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=af53826d-dd23-4c7f-974e-694f4dd5e792 user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:52:23Z TRC kyverno/pkg/webhooks/resource/mutation/mutation.go:131 > mutation rules from policy applied successfully URLParams= clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/mutate name=verify-enterprise-contract-74e6a53cf4ed2a759d160fef66d31007-pod namespace=chains-e2e-pxcs operation=CREATE policy=tekton-taskrun-resource-policy resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] rules=["set-task-resources"] uid=20a4d83e-a6a2-486f-a955-21618d96743d user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2
2026-10-02T02:52:23Z TRC kyverno/pkg/webhooks/resource/validation/validation.go:121 > validation passed URLParams= action=validate clusterroles=["basic-user","cluster-status","console-extensions-reader","helm-chartrepos-viewer","pipelines-scc-role","self-access-reviewer","system:basic-user","system:build-strategy-docker","system:build-strategy-jenkinspipeline","system:build-strategy-source","system:discovery","system:oauth-token-deleter","system:openshift:discovery","system:openshift:public-info-viewer","system:openshift:scc:restricted-v2","system:public-info-viewer","system:scope-impersonation","system:service-account-issuer-discovery","system:webhook","tekton-clustertasks-view-role","tekton-clustertriggerbindings-view-role","tekton-config-read-role","tekton-pipelines-controller-cluster-access","tekton-pipelines-controller-tenant-access","tekton-result-read-role"] gvk="/v1, Kind=Pod" gvr="/v1, Resource=pods" kind=Pod logger=webhooks/resource/validate name=verify-enterprise-contract-74e6a53cf4ed2a759d160fef66d31007-pod namespace=chains-e2e-pxcs operation=CREATE policy=restrict-docker-io-images resource=chains-e2e-pxcs/Pod/verify-enterprise-contract-74e6a53cf4ed2a759d160fef66d31007-pod resource.gvk="/v1, Kind=Pod" roles=["build-service:build-service-build-pipeline-config-read-only","konflux-info:konflux-public-info-view-role","kube-system:extension-apiserver-authentication-reader","openshift-config-managed:console-public","openshift-config-managed:openshift-network-public-role","openshift-config-managed:system:openshift:oauth-servercert-trust","openshift-operators:tekton-operator-info","openshift-pipelines:pipelines-as-code-info","openshift-pipelines:tekton-chains-info","openshift-pipelines:tekton-default-openshift-pipelines-view","openshift-pipelines:tekton-ecosystem-stepaction-list-role","openshift-pipelines:tekton-ecosystem-task-list-role","openshift-pipelines:tekton-pipelines-controller","openshift-pipelines:tekton-pipelines-info","openshift-pipelines:tekton-pipelines-leader-election","openshift-pipelines:tekton-results-info","openshift-pipelines:tekton-triggers-info","openshift:copied-csv-viewer","openshift:pipelines-as-code-templates","openshift:shared-resource-viewer","product-kubearchive:kubearchive-api-url-reader"] uid=ce5e74c9-7afe-4915-9a36-755ba290aa2c user={"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7561642-4ae0-46f1-9647-1156a540d03d"],"authentication.kubernetes.io/node-name":["ip-10-0-154-151.ec2.internal"],"authentication.kubernetes.io/node-uid":["b09ef22b-536c-426b-ad06-c45ceef92e1e"],"authentication.kubernetes.io/pod-name":["tekton-pipelines-controller-0"],"authentication.kubernetes.io/pod-uid":["e15cf600-de5b-4546-8b42-c19336a8fb9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:openshift-pipelines","system:authenticated"],"uid":"ef6d2141-109e-4c32-85ae-99c5e8fbcf52","username":"system:serviceaccount:openshift-pipelines:tekton-pipelines-controller"} v=2