2026-07-03T14:11:37+00:00: copying the token to /tmp/var/run/secrets/dex/serviceaccount/token
rm: cannot remove '/tmp/var/run/secrets/dex/serviceaccount/token': No such file or directory
2026-07-03T14:11:37+00:00: run Dex in background with pid 19
2026-07-03T14:11:37+00:00: waiting for the token to be refreshed
time=2026-07-03T14:11:37.711Z level=INFO msg="Version info" dex_version=DEV go.version="go1.26.4 (Red Hat 1.26.4-1.el10_2)" go.os=linux go.arch=amd64
time=2026-07-03T14:11:37.711Z level=INFO msg="config issuer" issuer=https://localhost:9443/idp/
time=2026-07-03T14:11:37.711Z level=INFO msg="kubernetes client" api_version=dex.coreos.com/v1
time=2026-07-03T14:11:37.714Z level=INFO msg="creating custom Kubernetes resources"
time=2026-07-03T14:11:37.808Z level=INFO msg="checking if custom resource has already been created..." object=authcodes.dex.coreos.com
time=2026-07-03T14:11:37.809Z level=INFO msg="custom resource not found" object=authcodes.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.809Z level=INFO msg="checking if custom resource has already been created..." object=authrequests.dex.coreos.com
time=2026-07-03T14:11:37.809Z level=INFO msg="custom resource not found" object=authrequests.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.809Z level=INFO msg="checking if custom resource has already been created..." object=oauth2clients.dex.coreos.com
time=2026-07-03T14:11:37.810Z level=INFO msg="custom resource not found" object=oauth2clients.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.810Z level=INFO msg="checking if custom resource has already been created..." object=signingkeies.dex.coreos.com
time=2026-07-03T14:11:37.810Z level=INFO msg="custom resource not found" object=signingkeies.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.810Z level=INFO msg="checking if custom resource has already been created..." object=refreshtokens.dex.coreos.com
time=2026-07-03T14:11:37.811Z level=INFO msg="custom resource not found" object=refreshtokens.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.811Z level=INFO msg="checking if custom resource has already been created..." object=passwords.dex.coreos.com
time=2026-07-03T14:11:37.811Z level=INFO msg="custom resource not found" object=passwords.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.811Z level=INFO msg="checking if custom resource has already been created..." object=offlinesessionses.dex.coreos.com
time=2026-07-03T14:11:37.812Z level=INFO msg="custom resource not found" object=offlinesessionses.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.812Z level=INFO msg="checking if custom resource has already been created..." object=connectors.dex.coreos.com
time=2026-07-03T14:11:37.908Z level=INFO msg="custom resource not found" object=connectors.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.908Z level=INFO msg="checking if custom resource has already been created..." object=devicerequests.dex.coreos.com
time=2026-07-03T14:11:37.908Z level=INFO msg="custom resource not found" object=devicerequests.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.908Z level=INFO msg="checking if custom resource has already been created..." object=devicetokens.dex.coreos.com
time=2026-07-03T14:11:37.909Z level=INFO msg="custom resource not found" object=devicetokens.dex.coreos.com err="not found"
time=2026-07-03T14:11:37.909Z level=INFO msg="found missing CRDs" count=10
time=2026-07-03T14:11:37.909Z level=INFO msg="crdHandling is 'ensure', attempting to create missing CRDs"
time=2026-07-03T14:11:37.914Z level=INFO msg="successfully created custom resource" object=authcodes.dex.coreos.com
time=2026-07-03T14:11:37.977Z level=INFO msg="successfully created custom resource" object=authrequests.dex.coreos.com
time=2026-07-03T14:11:38.206Z level=INFO msg="successfully created custom resource" object=oauth2clients.dex.coreos.com
time=2026-07-03T14:11:38.214Z level=INFO msg="successfully created custom resource" object=signingkeies.dex.coreos.com
time=2026-07-03T14:11:38.219Z level=INFO msg="successfully created custom resource" object=refreshtokens.dex.coreos.com
time=2026-07-03T14:11:38.223Z level=INFO msg="successfully created custom resource" object=passwords.dex.coreos.com
time=2026-07-03T14:11:38.229Z level=INFO msg="successfully created custom resource" object=offlinesessionses.dex.coreos.com
time=2026-07-03T14:11:38.235Z level=INFO msg="successfully created custom resource" object=connectors.dex.coreos.com
time=2026-07-03T14:11:38.241Z level=INFO msg="successfully created custom resource" object=devicerequests.dex.coreos.com
time=2026-07-03T14:11:38.247Z level=INFO msg="successfully created custom resource" object=devicetokens.dex.coreos.com
time=2026-07-03T14:11:38.247Z level=INFO msg="config storage" storage_type=kubernetes
time=2026-07-03T14:11:38.247Z level=INFO msg="config static client" client_name=oauth2-proxy
time=2026-07-03T14:11:38.247Z level=INFO msg="config connector: local passwords enabled"
time=2026-07-03T14:11:38.247Z level=INFO msg="config skipping approval screen"
time=2026-07-03T14:11:38.247Z level=INFO msg="config using password grant connector" password_connector=local
time=2026-07-03T14:11:38.247Z level=INFO msg="continue on connector failure feature flag enabled"
time=2026-07-03T14:11:38.247Z level=INFO msg="signer configured" type=local keys_rotation_period=6h
time=2026-07-03T14:11:38.247Z level=INFO msg="config refresh tokens rotation" enabled=true
time=2026-07-03T14:11:38.261Z level=ERROR msg="failed to get signing algorithm" err="failed to get keys: not found"
time=2026-07-03T14:11:38.262Z level=INFO msg="keys expired, rotating"
time=2026-07-03T14:11:41.134Z level=INFO msg="keys rotated" next_rotation=2026-07-03T20:11:39.128Z
time=2026-07-03T14:11:41.134Z level=INFO msg="listening on" server=telemetry address=0.0.0.0:5558
time=2026-07-03T14:11:41.134Z level=INFO msg="listening on" server=https address=0.0.0.0:9443
2026-07-03T14:19:38+00:00: sleeping 5 seconds to prevent all replicas to restart at the same time
2026-07-03T14:19:44+00:00: token refreshed, halting Dex via SIGTERM
run groups: received signal terminated
2026-07-03T14:19:44+00:00: waiting for Dex to gracefully stop
2026-07-03T14:19:45+00:00: copying the token to /tmp/var/run/secrets/dex/serviceaccount/token
2026-07-03T14:19:45+00:00: run Dex in background with pid 285
2026-07-03T14:19:45+00:00: waiting for the token to be refreshed
time=2026-07-03T14:19:45.426Z level=INFO msg="Version info" dex_version=DEV go.version="go1.26.4 (Red Hat 1.26.4-1.el10_2)" go.os=linux go.arch=amd64
time=2026-07-03T14:19:45.426Z level=INFO msg="config issuer" issuer=https://localhost:9443/idp/
time=2026-07-03T14:19:45.508Z level=INFO msg="kubernetes client" api_version=dex.coreos.com/v1
time=2026-07-03T14:19:45.510Z level=INFO msg="creating custom Kubernetes resources"
time=2026-07-03T14:19:45.510Z level=INFO msg="checking if custom resource has already been created..." object=authcodes.dex.coreos.com
time=2026-07-03T14:19:45.511Z level=INFO msg="the custom resource already available, skipping create" object=authcodes.dex.coreos.com
time=2026-07-03T14:19:45.511Z level=INFO msg="checking if custom resource has already been created..." object=authrequests.dex.coreos.com
time=2026-07-03T14:19:45.525Z level=INFO msg="the custom resource already available, skipping create" object=authrequests.dex.coreos.com
time=2026-07-03T14:19:45.525Z level=INFO msg="checking if custom resource has already been created..." object=oauth2clients.dex.coreos.com
time=2026-07-03T14:19:45.625Z level=INFO msg="the custom resource already available, skipping create" object=oauth2clients.dex.coreos.com
time=2026-07-03T14:19:45.625Z level=INFO msg="checking if custom resource has already been created..." object=signingkeies.dex.coreos.com
time=2026-07-03T14:19:45.626Z level=INFO msg="the custom resource already available, skipping create" object=signingkeies.dex.coreos.com
time=2026-07-03T14:19:45.626Z level=INFO msg="checking if custom resource has already been created..." object=refreshtokens.dex.coreos.com
time=2026-07-03T14:19:45.627Z level=INFO msg="the custom resource already available, skipping create" object=refreshtokens.dex.coreos.com
time=2026-07-03T14:19:45.627Z level=INFO msg="checking if custom resource has already been created..." object=passwords.dex.coreos.com
time=2026-07-03T14:19:45.629Z level=INFO msg="the custom resource already available, skipping create" object=passwords.dex.coreos.com
time=2026-07-03T14:19:45.629Z level=INFO msg="checking if custom resource has already been created..." object=offlinesessionses.dex.coreos.com
time=2026-07-03T14:19:45.630Z level=INFO msg="the custom resource already available, skipping create" object=offlinesessionses.dex.coreos.com
time=2026-07-03T14:19:45.630Z level=INFO msg="checking if custom resource has already been created..." object=connectors.dex.coreos.com
time=2026-07-03T14:19:45.631Z level=INFO msg="the custom resource already available, skipping create" object=connectors.dex.coreos.com
time=2026-07-03T14:19:45.631Z level=INFO msg="checking if custom resource has already been created..." object=devicerequests.dex.coreos.com
time=2026-07-03T14:19:45.632Z level=INFO msg="the custom resource already available, skipping create" object=devicerequests.dex.coreos.com
time=2026-07-03T14:19:45.632Z level=INFO msg="checking if custom resource has already been created..." object=devicetokens.dex.coreos.com
time=2026-07-03T14:19:45.633Z level=INFO msg="the custom resource already available, skipping create" object=devicetokens.dex.coreos.com
time=2026-07-03T14:19:45.633Z level=INFO msg="config storage" storage_type=kubernetes
time=2026-07-03T14:19:45.633Z level=INFO msg="config static client" client_name=oauth2-proxy
time=2026-07-03T14:19:45.633Z level=INFO msg="config connector: local passwords enabled"
time=2026-07-03T14:19:45.633Z level=INFO msg="config skipping approval screen"
time=2026-07-03T14:19:45.633Z level=INFO msg="config using password grant connector" password_connector=local
time=2026-07-03T14:19:45.633Z level=INFO msg="continue on connector failure feature flag enabled"
time=2026-07-03T14:19:45.633Z level=INFO msg="signer configured" type=local keys_rotation_period=6h
time=2026-07-03T14:19:45.633Z level=INFO msg="config refresh tokens rotation" enabled=true
time=2026-07-03T14:19:45.637Z level=INFO msg="listening on" server=telemetry address=0.0.0.0:5558
time=2026-07-03T14:19:45.637Z level=INFO msg="listening on" server=https address=0.0.0.0:9443
time=2026-07-03T14:21:07.880Z level=ERROR msg="failed to rotate keys" err="get keys: Get \"https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/konflux-ui/signingkeies/openid-connect-keys\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"