2026-10-11T10:57:45+00:00: copying the token to /tmp/var/run/secrets/dex/serviceaccount/token
rm: cannot remove '/tmp/var/run/secrets/dex/serviceaccount/token': No such file or directory
2026-10-11T10:57:45+00:00: run Dex in background with pid 19
2026-10-11T10:57:45+00:00: waiting for the token to be refreshed
time=2026-10-11T10:57:45.734Z level=INFO msg="Version info" dex_version=DEV go.version="go1.26.7 (Red Hat 1.26.7-2.el10_2)" go.os=linux go.arch=amd64
time=2026-10-11T10:57:45.734Z level=INFO msg="config issuer" issuer=https://localhost:9443/idp/
time=2026-10-11T10:57:45.735Z level=INFO msg="kubernetes client" api_version=dex.coreos.com/v1
time=2026-10-11T10:57:45.832Z level=INFO msg="creating custom Kubernetes resources"
time=2026-10-11T10:57:45.832Z level=INFO msg="checking if custom resource has already been created..." object=authcodes.dex.coreos.com
time=2026-10-11T10:57:45.833Z level=INFO msg="custom resource not found" object=authcodes.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.833Z level=INFO msg="checking if custom resource has already been created..." object=authrequests.dex.coreos.com
time=2026-10-11T10:57:45.833Z level=INFO msg="custom resource not found" object=authrequests.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.833Z level=INFO msg="checking if custom resource has already been created..." object=oauth2clients.dex.coreos.com
time=2026-10-11T10:57:45.834Z level=INFO msg="custom resource not found" object=oauth2clients.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.834Z level=INFO msg="checking if custom resource has already been created..." object=signingkeies.dex.coreos.com
time=2026-10-11T10:57:45.834Z level=INFO msg="custom resource not found" object=signingkeies.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.834Z level=INFO msg="checking if custom resource has already been created..." object=refreshtokens.dex.coreos.com
time=2026-10-11T10:57:45.834Z level=INFO msg="custom resource not found" object=refreshtokens.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.834Z level=INFO msg="checking if custom resource has already been created..." object=passwords.dex.coreos.com
time=2026-10-11T10:57:45.835Z level=INFO msg="custom resource not found" object=passwords.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.835Z level=INFO msg="checking if custom resource has already been created..." object=offlinesessionses.dex.coreos.com
time=2026-10-11T10:57:45.835Z level=INFO msg="custom resource not found" object=offlinesessionses.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.835Z level=INFO msg="checking if custom resource has already been created..." object=connectors.dex.coreos.com
time=2026-10-11T10:57:45.835Z level=INFO msg="custom resource not found" object=connectors.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.835Z level=INFO msg="checking if custom resource has already been created..." object=devicerequests.dex.coreos.com
time=2026-10-11T10:57:45.836Z level=INFO msg="custom resource not found" object=devicerequests.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.836Z level=INFO msg="checking if custom resource has already been created..." object=devicetokens.dex.coreos.com
time=2026-10-11T10:57:45.836Z level=INFO msg="custom resource not found" object=devicetokens.dex.coreos.com err="not found"
time=2026-10-11T10:57:45.836Z level=INFO msg="found missing CRDs" count=10
time=2026-10-11T10:57:45.836Z level=INFO msg="crdHandling is 'ensure', attempting to create missing CRDs"
time=2026-10-11T10:57:46.828Z level=INFO msg="successfully created custom resource" object=authcodes.dex.coreos.com
time=2026-10-11T10:57:46.866Z level=INFO msg="successfully created custom resource" object=authrequests.dex.coreos.com
time=2026-10-11T10:57:46.916Z level=INFO msg="successfully created custom resource" object=oauth2clients.dex.coreos.com
time=2026-10-11T10:57:46.946Z level=INFO msg="successfully created custom resource" object=signingkeies.dex.coreos.com
time=2026-10-11T10:57:46.953Z level=INFO msg="successfully created custom resource" object=refreshtokens.dex.coreos.com
time=2026-10-11T10:57:46.959Z level=INFO msg="successfully created custom resource" object=passwords.dex.coreos.com
time=2026-10-11T10:57:46.965Z level=INFO msg="successfully created custom resource" object=offlinesessionses.dex.coreos.com
time=2026-10-11T10:57:46.971Z level=INFO msg="successfully created custom resource" object=connectors.dex.coreos.com
time=2026-10-11T10:57:46.977Z level=INFO msg="successfully created custom resource" object=devicerequests.dex.coreos.com
time=2026-10-11T10:57:46.984Z level=INFO msg="successfully created custom resource" object=devicetokens.dex.coreos.com
time=2026-10-11T10:57:46.984Z level=INFO msg="config storage" storage_type=kubernetes
time=2026-10-11T10:57:46.984Z level=INFO msg="config static client" client_name=oauth2-proxy
time=2026-10-11T10:57:46.984Z level=INFO msg="config static client" client_name=CLI
time=2026-10-11T10:57:46.984Z level=INFO msg="config connector: local passwords enabled"
time=2026-10-11T10:57:46.984Z level=INFO msg="config skipping approval screen"
time=2026-10-11T10:57:46.984Z level=INFO msg="config using password grant connector" password_connector=local
time=2026-10-11T10:57:46.984Z level=INFO msg="continue on connector failure feature flag enabled"
time=2026-10-11T10:57:46.984Z level=INFO msg="signer configured" type=local keys_rotation_period=6h
time=2026-10-11T10:57:46.984Z level=INFO msg="config refresh tokens rotation" enabled=true
time=2026-10-11T10:57:46.999Z level=ERROR msg="failed to get signing algorithm" err="failed to get keys: not found"
time=2026-10-11T10:57:47.000Z level=INFO msg="keys expired, rotating"
time=2026-10-11T10:57:49.740Z level=INFO msg="keys rotated" next_rotation=2026-10-11T16:57:47.734Z
time=2026-10-11T10:57:49.740Z level=INFO msg="listening on" server=telemetry address=0.0.0.0:5558
time=2026-10-11T10:57:49.740Z level=INFO msg="listening on" server=https address=0.0.0.0:9443
2026-10-11T11:06:06+00:00: sleeping 8 seconds to prevent all replicas to restart at the same time
2026-10-11T11:06:14+00:00: token refreshed, halting Dex via SIGTERM
run groups: received signal terminated
2026-10-11T11:06:14+00:00: waiting for Dex to gracefully stop
2026-10-11T11:06:15+00:00: copying the token to /tmp/var/run/secrets/dex/serviceaccount/token
2026-10-11T11:06:15+00:00: run Dex in background with pid 296
2026-10-11T11:06:15+00:00: waiting for the token to be refreshed
time=2026-10-11T11:06:15.932Z level=INFO msg="Version info" dex_version=DEV go.version="go1.26.7 (Red Hat 1.26.7-2.el10_2)" go.os=linux go.arch=amd64
time=2026-10-11T11:06:15.932Z level=INFO msg="config issuer" issuer=https://localhost:9443/idp/
time=2026-10-11T11:06:15.932Z level=INFO msg="kubernetes client" api_version=dex.coreos.com/v1
time=2026-10-11T11:06:15.935Z level=INFO msg="creating custom Kubernetes resources"
time=2026-10-11T11:06:15.935Z level=INFO msg="checking if custom resource has already been created..." object=authcodes.dex.coreos.com
time=2026-10-11T11:06:15.937Z level=INFO msg="the custom resource already available, skipping create" object=authcodes.dex.coreos.com
time=2026-10-11T11:06:15.937Z level=INFO msg="checking if custom resource has already been created..." object=authrequests.dex.coreos.com
time=2026-10-11T11:06:15.938Z level=INFO msg="the custom resource already available, skipping create" object=authrequests.dex.coreos.com
time=2026-10-11T11:06:15.938Z level=INFO msg="checking if custom resource has already been created..." object=oauth2clients.dex.coreos.com
time=2026-10-11T11:06:15.939Z level=INFO msg="the custom resource already available, skipping create" object=oauth2clients.dex.coreos.com
time=2026-10-11T11:06:15.939Z level=INFO msg="checking if custom resource has already been created..." object=signingkeies.dex.coreos.com
time=2026-10-11T11:06:15.940Z level=INFO msg="the custom resource already available, skipping create" object=signingkeies.dex.coreos.com
time=2026-10-11T11:06:15.940Z level=INFO msg="checking if custom resource has already been created..." object=refreshtokens.dex.coreos.com
time=2026-10-11T11:06:15.941Z level=INFO msg="the custom resource already available, skipping create" object=refreshtokens.dex.coreos.com
time=2026-10-11T11:06:15.941Z level=INFO msg="checking if custom resource has already been created..." object=passwords.dex.coreos.com
time=2026-10-11T11:06:15.942Z level=INFO msg="the custom resource already available, skipping create" object=passwords.dex.coreos.com
time=2026-10-11T11:06:15.942Z level=INFO msg="checking if custom resource has already been created..." object=offlinesessionses.dex.coreos.com
time=2026-10-11T11:06:15.943Z level=INFO msg="the custom resource already available, skipping create" object=offlinesessionses.dex.coreos.com
time=2026-10-11T11:06:15.943Z level=INFO msg="checking if custom resource has already been created..." object=connectors.dex.coreos.com
time=2026-10-11T11:06:15.943Z level=INFO msg="the custom resource already available, skipping create" object=connectors.dex.coreos.com
time=2026-10-11T11:06:15.943Z level=INFO msg="checking if custom resource has already been created..." object=devicerequests.dex.coreos.com
time=2026-10-11T11:06:15.944Z level=INFO msg="the custom resource already available, skipping create" object=devicerequests.dex.coreos.com
time=2026-10-11T11:06:15.944Z level=INFO msg="checking if custom resource has already been created..." object=devicetokens.dex.coreos.com
time=2026-10-11T11:06:15.945Z level=INFO msg="the custom resource already available, skipping create" object=devicetokens.dex.coreos.com
time=2026-10-11T11:06:15.945Z level=INFO msg="config storage" storage_type=kubernetes
time=2026-10-11T11:06:15.945Z level=INFO msg="config static client" client_name=oauth2-proxy
time=2026-10-11T11:06:15.945Z level=INFO msg="config static client" client_name=CLI
time=2026-10-11T11:06:15.945Z level=INFO msg="config connector: local passwords enabled"
time=2026-10-11T11:06:15.945Z level=INFO msg="config skipping approval screen"
time=2026-10-11T11:06:15.945Z level=INFO msg="config using password grant connector" password_connector=local
time=2026-10-11T11:06:15.945Z level=INFO msg="continue on connector failure feature flag enabled"
time=2026-10-11T11:06:15.945Z level=INFO msg="signer configured" type=local keys_rotation_period=6h
time=2026-10-11T11:06:15.945Z level=INFO msg="config refresh tokens rotation" enabled=true
time=2026-10-11T11:06:15.949Z level=INFO msg="listening on" server=telemetry address=0.0.0.0:5558
time=2026-10-11T11:06:15.949Z level=INFO msg="listening on" server=https address=0.0.0.0:9443
time=2026-10-11T11:10:09.873Z level=ERROR msg="failed to rotate keys" err="get keys: Get \"https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/konflux-ui/signingkeies/openid-connect-keys\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)"
time=2026-10-11T11:11:28.366Z level=INFO msg="garbage collection run, delete auth" requests=2 auth_codes=0 device_requests=0 device_tokens=0
time=2026-10-11T11:14:10.407Z level=ERROR msg="failed to rotate keys" err="get keys: Get \"https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/konflux-ui/signingkeies/openid-connect-keys\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"
2026-10-11T11:14:26+00:00: sleeping 8 seconds to prevent all replicas to restart at the same time
run groups: received signal terminated
2026-10-11T11:14:34+00:00: token refreshed, halting Dex via SIGTERM
time=2026-10-11T11:14:36.133Z level=INFO msg="Version info" dex_version=DEV go.version="go1.26.7 (Red Hat 1.26.7-2.el10_2)" go.os=linux go.arch=amd64
2026-10-11T11:14:34+00:00: waiting for Dex to gracefully stop
time=2026-10-11T11:14:36.133Z level=INFO msg="config issuer" issuer=https://localhost:9443/idp/
time=2026-10-11T11:14:36.133Z level=INFO msg="kubernetes client" api_version=dex.coreos.com/v1
time=2026-10-11T11:14:36.136Z level=INFO msg="creating custom Kubernetes resources"
time=2026-10-11T11:14:36.137Z level=INFO msg="checking if custom resource has already been created..." object=authcodes.dex.coreos.com
2026-10-11T11:14:35+00:00: copying the token to /tmp/var/run/secrets/dex/serviceaccount/token
2026-10-11T11:14:35+00:00: run Dex in background with pid 568
2026-10-11T11:14:35+00:00: waiting for the token to be refreshed
time=2026-10-11T11:14:51.137Z level=INFO msg="custom resource not found" object=authcodes.dex.coreos.com err="Get \"https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/konflux-ui/authcodes?limit=1\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"
time=2026-10-11T11:14:51.137Z level=INFO msg="checking if custom resource has already been created..." object=authrequests.dex.coreos.com
time=2026-10-11T11:15:02.148Z level=INFO msg="the custom resource already available, skipping create" object=authrequests.dex.coreos.com
time=2026-10-11T11:15:02.148Z level=INFO msg="checking if custom resource has already been created..." object=oauth2clients.dex.coreos.com
time=2026-10-11T11:15:02.433Z level=INFO msg="the custom resource already available, skipping create" object=oauth2clients.dex.coreos.com
time=2026-10-11T11:15:02.433Z level=INFO msg="checking if custom resource has already been created..." object=signingkeies.dex.coreos.com
time=2026-10-11T11:15:02.531Z level=INFO msg="the custom resource already available, skipping create" object=signingkeies.dex.coreos.com
time=2026-10-11T11:15:02.531Z level=INFO msg="checking if custom resource has already been created..." object=refreshtokens.dex.coreos.com
time=2026-10-11T11:15:02.622Z level=INFO msg="the custom resource already available, skipping create" object=refreshtokens.dex.coreos.com
time=2026-10-11T11:15:02.622Z level=INFO msg="checking if custom resource has already been created..." object=passwords.dex.coreos.com
time=2026-10-11T11:15:02.729Z level=INFO msg="the custom resource already available, skipping create" object=passwords.dex.coreos.com
time=2026-10-11T11:15:02.729Z level=INFO msg="checking if custom resource has already been created..." object=offlinesessionses.dex.coreos.com
time=2026-10-11T11:15:02.797Z level=INFO msg="the custom resource already available, skipping create" object=offlinesessionses.dex.coreos.com
time=2026-10-11T11:15:02.797Z level=INFO msg="checking if custom resource has already been created..." object=connectors.dex.coreos.com
time=2026-10-11T11:15:02.911Z level=INFO msg="the custom resource already available, skipping create" object=connectors.dex.coreos.com
time=2026-10-11T11:15:02.911Z level=INFO msg="checking if custom resource has already been created..." object=devicerequests.dex.coreos.com
time=2026-10-11T11:15:03.010Z level=INFO msg="the custom resource already available, skipping create" object=devicerequests.dex.coreos.com
time=2026-10-11T11:15:03.010Z level=INFO msg="checking if custom resource has already been created..." object=devicetokens.dex.coreos.com
time=2026-10-11T11:15:03.106Z level=INFO msg="the custom resource already available, skipping create" object=devicetokens.dex.coreos.com
time=2026-10-11T11:15:03.106Z level=INFO msg="found missing CRDs" count=1
time=2026-10-11T11:15:03.106Z level=INFO msg="crdHandling is 'ensure', attempting to create missing CRDs"
time=2026-10-11T11:15:03.203Z level=INFO msg="custom resource already created" object=authcodes.dex.coreos.com
time=2026-10-11T11:15:03.203Z level=INFO msg="config storage" storage_type=kubernetes
time=2026-10-11T11:15:03.203Z level=INFO msg="config static client" client_name=oauth2-proxy
time=2026-10-11T11:15:03.203Z level=INFO msg="config static client" client_name=CLI
time=2026-10-11T11:15:03.203Z level=INFO msg="config connector: local passwords enabled"
time=2026-10-11T11:15:03.203Z level=INFO msg="config skipping approval screen"
time=2026-10-11T11:15:03.203Z level=INFO msg="config using password grant connector" password_connector=local
time=2026-10-11T11:15:03.203Z level=INFO msg="continue on connector failure feature flag enabled"
time=2026-10-11T11:15:03.203Z level=INFO msg="signer configured" type=local keys_rotation_period=6h
time=2026-10-11T11:15:03.203Z level=INFO msg="config refresh tokens rotation" enabled=true
time=2026-10-11T11:15:03.299Z level=INFO msg="listening on" server=telemetry address=0.0.0.0:5558
time=2026-10-11T11:15:03.299Z level=INFO msg="listening on" server=https address=0.0.0.0:9443
2026-10-11T11:15:05+00:00: received signal, shutting down
run groups: received signal terminated