'/usr/local/share/ca-certificates/00-clusterCA.crt' -> '/etc/pki/ca-trust/source/anchors/00-clusterCA.crt'
'/etc/pki/injected-ca-trust/tls-ca-bundle.pem' -> '/etc/pki/ca-trust/source/anchors/tls-ca-bundle.pem'
Migrator: 2026/02/04 14:38:53.310751 log.go:18: Info: Run migrator.run() with version: 4.9.2, DB sequence: 213
Migrator: 2026/02/04 14:38:53.311107 log.go:18: Info: conf.Maintenance.ForceRollbackVersion: none
Migrator: 2026/02/04 14:38:53.311771 log.go:18: Info: checking if the database "central_active" exists
pkg/postgres/pgadmin: 2026/02/04 14:38:53.327982 admin_utils.go:88: Info: CreateDB "central_active"
pkg/postgres/pgadmin: 2026/02/04 14:38:53.340583 admin_utils.go:111: Info: "central_active" has been created
clone/rocksdb: 2026/02/04 14:38:53.407299 db_clone_manager_impl.go:98: Info: Database clones:
Migrator: 2026/02/04 14:38:53.407419 log.go:18: Info: connect to gorm: "host=central-db.tssc-acs.svc port=5432 user=postgres sslmode=verify-ca sslrootcert=/run/secrets/stackrox.io/certs/ca.pem statement_timeout=1.2e+06 pool_min_conns=10 pool_max_conns=90 client_encoding=UTF8"
clone/postgres: 2026/02/04 14:38:53.434237 db_clone_manager_impl.go:94: Info: db is of version &{ 0 0 0 0001-01-01 00:00:00 +0000 UTC}
clone/postgres: 2026/02/04 14:38:53.454199 db_clone_manager_impl.go:167: Info: safeRemove -> central_temp
NOTICE:  database "central_temp" does not exist, skipping
clone/postgres: 2026/02/04 14:38:53.471049 db_clone_manager_impl.go:158: Info: Postgres Database clones:
clone/postgres: 2026/02/04 14:38:53.471153 db_clone_manager_impl.go:160: Info: central_active -> &{ 0 0 0 0001-01-01 00:00:00 +0000 UTC}
clone/postgres: 2026/02/04 14:38:53.471185 db_clone_manager_impl.go:221: Info: GetCloneToMigrate
clone/postgres: 2026/02/04 14:38:53.471206 db_clone_manager_impl.go:286: Info: Fell through all checks to return current.
Migrator: 2026/02/04 14:38:53.471228 log.go:18: Info: Clone to Migrate "central_active"
Migrator: 2026/02/04 14:38:53.471254 log.go:18: Info: Load database = "central_active"
Migrator: 2026/02/04 14:38:53.488891 log.go:13: Info: Successfully connected to central database.
Migrator: 2026/02/04 14:38:53.532117 log.go:13: Info: Fresh install of the database. There is no data to migrate...
clone/postgres: 2026/02/04 14:38:55.721307 db_clone_manager_impl.go:305: Info: Persisting upgraded clone: central_active
pkg/mtls/certwatch: 2026/02/04 14:38:55.886218 certwatch.go:63: Info: No TLS certificate found. Using internal certificates for HTTPS. Watch dir: "/run/secrets/stackrox.io/default-tls-cert"
pkg/memlimit: 2026/02/04 14:38:55.886360 memlimit.go:43: Info: ROX_MEMLIMIT set to 3.80Gi
main: 2026/02/04 14:38:55.936974 main.go:305: Info: Running StackRox Version: 4.9.2
version: 2026/02/04 14:38:55.960601 ensure.go:45: Info: No version found in the DB. Assuming that this is a fresh install...
NOTICE:  database "central_backup" does not exist, skipping
pkg/features: 2026/02/04 14:38:55.977249 features.go:63: Info: Feature flags {"ROX_ACSCS_EMAIL_NOTIFIER": true, "ROX_ACTIVE_VULN_MGMT": false, "ROX_ADMISSION_CONTROLLER_CONFIG": true, "ROX_AGGREGATE_DEPLOYMENT_REFERENCE_OPTIMIZATION": false, "ROX_ATTEMPT_MANIFEST_DIGEST": true, "ROX_AUTH_MACHINE_TO_MACHINE": true, "ROX_AUTO_LOCK_PROCESS_BASELINES": true, "ROX_CAPTURE_INTERMEDIATE_EVENTS": true, "ROX_CLUSTERS_PAGE_MIGRATION_UI": true, "ROX_CLUSTER_AWARE_DEPLOYMENT_CHECK": true, "ROX_CLUSTER_REGISTRATION_SECRETS": true, "ROX_COLLECTOR_RUNTIME_CONFIG": false, "ROX_COMPLIANCE_ENHANCEMENTS": true, "ROX_COMPLIANCE_REMEDIATION": true, "ROX_COMPLIANCE_REPORTING": true, "ROX_CUSTOMIZABLE_PLATFORM_COMPONENTS": true, "ROX_DELEGATE_WATCHED_IMAGE_REPROCESSING": true, "ROX_DEPLOYMENT_BUILD_OPTIMIZATION": true, "ROX_EPSS_SCORE": true, "ROX_EXTERNAL_IPS": true, "ROX_FLATTEN_CVE_DATA": true, "ROX_FLATTEN_IMAGE_DATA": false, "ROX_LLM_RISK_RECOMMENDATION": false, "ROX_MICROSOFT_SENTINEL": true, "ROX_NETWORK_GRAPH_AGGREGATE_EXT_IPS": false, "ROX_NETWORK_GRAPH_EXTERNAL_IPS": true, "ROX_NODE_INDEX_ENABLED": true, "ROX_PLATFORM_COMPONENTS": true, "ROX_POLICY_CRITERIA_MODAL": false, "ROX_PREVENT_SENSOR_RESTART_ON_DISCONNECT": true, "ROX_SBOM_GENERATION": true, "ROX_SCANNER_V4": true, "ROX_SCANNER_V4_MAVEN_SEARCH": false, "ROX_SCANNER_V4_PARTIAL_NODE_JS_SUPPORT": false, "ROX_SCANNER_V4_RED_HAT_CSAF": false, "ROX_SCANNER_V4_RED_HAT_CVES": true, "ROX_SCANNER_V4_RED_HAT_LAYERS_RED_HAT_VULNS_ONLY": false, "ROX_SCANNER_V4_REINDEX": true, "ROX_SCANNER_V4_STORE_EXTERNAL_INDEX_REPORTS": true, "ROX_SCAN_SCHEDULE_REPORT_JOBS": true, "ROX_SENSITIVE_FILE_ACTIVITY": false, "ROX_SENSOR_PULL_SECRETS_BY_NAME": true, "ROX_SENSOR_RECONCILIATION": true, "ROX_SENSOR_SINGLE_SCAN": true, "ROX_SOURCED_AUTOGENERATED_INTEGRATIONS": false, "ROX_STORE_EVENT_HASHES": true, "ROX_UNQUALIFIED_SEARCH_REGISTRIES": false, "ROX_VIRTUAL_MACHINES": false, "ROX_VULNERABILITY_VIEW_BASED_REPORTS": true, "ROX_VULN_MGMT_LEGACY_SNOOZE": false, "ROX_VULN_MGMT_UNIFIED_CVE_DEFERRAL": true}
pkg/mtls/certwatch: 2026/02/04 14:38:56.032008 certwatch.go:65: Info: TLS certificate loaded, using the following cert for HTTPS: (SerialNumber: 4859390621108726128, Subject: CN=central.tssc-acs.svc, DNSNames: [central.tssc-acs.svc central.tssc-acs.svc.cluster.local], Issuer: CN=openshift-service-serving-signer@1770215328), watch dir: "/run/secrets/stackrox.io/monitoring-tls"
auth/userpass: 2026/02/04 14:38:56.048830 watch_handler.go:38: Info: htpasswd file found. Updating basic auth credentials
pkg/metrics: 2026/02/04 14:38:56.055202 tls.go:176: Info: Updating secure metrics client CAs based on kube-system/extension-apiserver-authentication
pkg/metrics: 2026/02/04 14:38:56.055528 throttle.go:90: Info: gathering CPU throttle metrics from sys/fs/cgroup/cpu.stat
pkg/metrics: 2026/02/04 14:38:56.059906 tls.go:176: Info: Updating secure metrics client CAs based on kube-system/extension-apiserver-authentication
auth/userpass: 2026/02/04 14:38:56.101990 watch_handler.go:38: Info: htpasswd file found. Updating basic auth credentials
imageintegration/datastore: 2026/02/04 14:38:56.110866 singleton.go:141: Info: Upserting default Scanner V4 integration "Scanner V4" (a87471e6-9678-4e66-8348-91e302b6de07)
image/datastore: 2026/02/04 14:38:56.114060 datastore_impl.go:354: Info: Initialized image ranking with 0 images
node/datastore: 2026/02/04 14:38:56.129742 datastore_impl.go:291: Info: Initialized node ranking
policycategory/datastore: 2026/02/04 14:38:56.148767 singleton.go:58: Info: Loaded 14 default policy categories
policy/datastore: 2026/02/04 14:38:56.386082 singleton.go:139: Info: Loaded 87 new default Policies
cve/fetcher: 2026/02/04 14:38:56.386617 orchestrator.go:59: Info: Found 0 clusters to scan for orchestrator vulnerabilities.
cve/fetcher: 2026/02/04 14:38:56.386933 orchestrator.go:231: Info: Successfully fetched 0 Kubernetes CVEs
cve/fetcher: 2026/02/04 14:38:56.387198 orchestrator.go:231: Info: Successfully fetched 0 OpenShift CVEs
cve/fetcher: 2026/02/04 14:38:56.387394 orchestrator.go:231: Info: Successfully fetched 0 Istio CVEs
nodecomponent/datastore: 2026/02/04 14:38:56.427279 datastore_impl.go:109: Info: Initialized node component ranking
imagecomponent/v2/datastore: 2026/02/04 14:38:56.428332 datastore_impl.go:108: Info: Initialized image component ranking
scannerdefinitions/handler: 2026/02/04 14:38:56.512705 handler.go:186: Info: In online mode: scanner definitions will be updated automatically
detection/lifecycle: 2026/02/04 14:38:56.602189 singleton.go:47: Info: Injecting 87 policies into detectors.
detection/lifecycle: 2026/02/04 14:38:56.633166 singleton.go:52: Info: Done injecting policies.
detection/lifecycle: 2026/02/04 14:38:56.634396 manager_impl.go:132: Info: Cleaning up 0 processes as a part of building process filter
detection/lifecycle: 2026/02/04 14:38:56.634442 manager_impl.go:136: Info: Successfully cleaned up those 0 processes
complianceoperator/v2/report/manager: 2026/02/04 14:38:56.789636 manager_impl.go:173: Info: Starting compliance report manager
pkg/grpc: 2026/02/04 14:38:56.790268 server.go:304: Info: Launching backend gRPC listener
pkg/grpc: 2026/02/04 14:38:56.797376 server.go:494: Info: TLS-enabled multiplexed HTTP/gRPC server listening on [::]:8443
reprocessor: 2026/02/04 14:38:56.798899 reprocessor.go:297: Info: Found 0 nodes to scan
reprocessor: 2026/02/04 14:38:56.798951 reprocessor.go:323: Info: Successfully reprocessed 0/0 nodes
vulnmgmt/vulnerabilityrequest/manager/requestmgr: 2026/02/04 14:38:56.799449 manager_impl.go:786: Info: [STARTUP] Successfully cached all vulnerability requests
platform/reprocessor: 2026/02/04 14:38:56.800612 reprocessor_impl.go:66: Error: Platform reprocessor was already started
declarativeconfig: 2026/02/04 14:38:56.800721 manager_impl.go:116: Info: Declarative configuration directory does not exist, no reconciliation will be done
cve/suppress: 2026/02/04 14:38:56.800874 reprocessor.go:112: Info: Successfully unsuppressed 0 CVEs
reprocessor: 2026/02/04 14:38:56.803840 reprocessor.go:297: Info: Found 0 watched images to scan
reprocessor: 2026/02/04 14:38:56.803880 reprocessor.go:323: Info: Successfully reprocessed 0/0 watched images
imagecomponent/datastore: 2026/02/04 14:38:56.803897 datastore_impl.go:109: Info: Initialized image component ranking
reprocessor: 2026/02/04 14:38:56.806331 reprocessor.go:379: Info: Found 0 images to scan
pruning: 2026/02/04 14:38:56.817046 pruning.go:182: Info: [Pruning] Starting a garbage collection cycle
telemetry/centralclient: 2026/02/04 14:38:56.818301 client.go:232: Info: API Telemetry campaign: [{"headers":{"Rh-Execution-Environment":"","Rh-Roxctl-Command":"","Rh-Roxctl-Command-Index":"","User-Agent":"*roxctl*"}},{"path":"/v1/clusters","headers":{"Rh-ServiceNow-Integration":"","User-Agent":"*ServiceNow*"}},{"headers":{"User-Agent":"*-GHA*"}},{"path":"/api/v1/images/sbom","method":"POST","headers":{"User-Agent":""}},{"headers":{"User-Agent":"*stackrox-container-image-scanner*"}},{"path":"{/api/splunk/ta/*,/v1/auth/m2m/exchange,/api/cli/download/*}","headers":{"User-Agent":""}},null]
platform/reprocessor: 2026/02/04 14:38:56.818579 reprocessor_impl.go:154: Info: Done reprocessing alerts with platform rules
pruning: 2026/02/04 14:38:56.819002 pruning.go:624: Info: [Image pruning] Found 0 image search results
platform/reprocessor: 2026/02/04 14:38:56.820028 reprocessor_impl.go:195: Info: Done reprocessing deployments with platform rules
pruning: 2026/02/04 14:38:56.820168 pruning.go:941: Info: [Alert pruning] Removing 0 alerts for "pruneResolvedDeployAfter"
pruning: 2026/02/04 14:38:56.821057 pruning.go:941: Info: [Alert pruning] Removing 0 alerts for "pruneAllRuntimeAfter"
pruning: 2026/02/04 14:38:56.821525 pruning.go:941: Info: [Alert pruning] Removing 0 alerts for "pruneDeletedRuntimeAfter"
telemetry/centralclient: 2026/02/04 14:38:56.821827 client.go:167: Info: API Telemetry ignored paths: {/v1/ping,/v1.PingService/Ping,/v1/metadata,/static/*}
pruning: 2026/02/04 14:38:56.822532 pruning.go:941: Info: [Alert pruning] Removing 0 alerts for "pruneAttemptedDeployAfter"
pruning: 2026/02/04 14:38:56.823098 pruning.go:941: Info: [Alert pruning] Removing 0 alerts for "pruneAttemptedRuntimeAfter"
pruning: 2026/02/04 14:38:56.823195 pruning.go:950: Info: Pruned 0 alerts based on retention configuration
pruning: 2026/02/04 14:38:56.824450 pruning.go:557: Info: [Alert pruning] Found 0 orphaned alerts
pruning: 2026/02/04 14:38:56.824503 pruning.go:608: Info: [Network Flow pruning] Completed
pruning: 2026/02/04 14:38:56.825048 pruning.go:258: Info: [Pruning] Found no orphaned pods...
pruning: 2026/02/04 14:38:56.825712 pruning.go:281: Info: [Pruning] Found no orphaned nodes...
pruning: 2026/02/04 14:38:56.827455 pruning.go:401: Info: [PLOP pruning by processes] Pruning of orphaned PLOPs by processes complete
pruning: 2026/02/04 14:38:56.827944 pruning.go:433: Info: [Pruning] Found no processes orphaned by deployment...
pruning: 2026/02/04 14:38:56.828378 pruning.go:433: Info: [Pruning] Found no processes orphaned by pod...
pruning: 2026/02/04 14:38:56.828408 pruning.go:427: Info: [Pruning] Pruning of orphaned processes complete.  Pruned 0 orphaned processes (0 orphaned by deployments and 0 orphaned by pods)
pruning: 2026/02/04 14:38:56.828863 pruning.go:501: Info: [Process baseline pruning] Removed 0 process baselines
pruning: 2026/02/04 14:38:56.829536 pruning.go:510: Info: [PLOP pruning] Found 0 orphaned process listening on port objects
pruning: 2026/02/04 14:38:56.829890 pruning.go:517: Info: [PLOP pruning] Pruning of 0 orphaned PLOPs with no matching process indicator or process information complete
pruning: 2026/02/04 14:38:56.830437 pruning.go:525: Info: [PLOP pruning] Prunned 0 orphaned PLOPs with no poduid
pruning: 2026/02/04 14:38:56.831011 pruning.go:301: Info: [Pruning] Found no orphaned service accounts...
pruning: 2026/02/04 14:38:56.831587 pruning.go:301: Info: [Pruning] Found no orphaned K8S roles...
pruning: 2026/02/04 14:38:56.832071 pruning.go:301: Info: [Pruning] Found no orphaned K8S role bindings...
pruning: 2026/02/04 14:38:56.833113 pruning.go:986: Info: [Risk pruning] Removing 0 deployment risks
pruning: 2026/02/04 14:38:56.833586 pruning.go:1000: Info: [Risk pruning] Removing 0 image risks
pruning: 2026/02/04 14:38:56.834339 pruning.go:1026: Info: [Risk pruning] Removing 0 image component risks
pruning: 2026/02/04 14:38:56.834760 pruning.go:1040: Info: [Risk pruning] Removing 0 node risks
pruning: 2026/02/04 14:38:56.835264 pruning.go:718: Info: [Cluster Pruning] pruning is disabled.
pruning: 2026/02/04 14:38:56.837538 pruning.go:709: Info: [Downloadable Report Pruning] Removed 0 blobs and freed 0 bytes
pruning: 2026/02/04 14:38:56.839315 pruning.go:203: Info: [Pruning] Finished garbage collection cycle
networkgraph/entity/gatherer: 2026/02/04 14:38:57.104236 load_bundled.go:49: Info: Successfully loaded 72130 external networks
telemetry/centralclient: 2026/02/04 14:38:57.466984 client.go:220: Info: Telemetry collection has been enabled.
main: 2026/02/04 14:38:57.467116 main.go:659: Info: Telemetry Client Configuration: endpoint: "https://console.redhat.com/connections/api", initial key: "", configURL: "hardcoded", client ID: "d705c1a0-06f0-47bb-ab59-a5cc8d0f0c24", client type: "Central", client version: "4.9.2", await initial identity: true, groups: map[Tenant:[d705c1a0-06f0-47bb-ab59-a5cc8d0f0c24]], gathering period: 0s, batch size: 1, push interval: 10m0s, effective key: eDd6QP8uWm0jCkAowEvijOPgeqtlulwR, consent: true, identity sent: true
networkgraph/entity/gatherer: 2026/02/04 14:38:58.457804 load_bundled.go:61: Info: Found 0 external networks in DB. Successfully stored 72130/72130 new external networks
scannerdefinitions/handler: 2026/02/04 14:39:04.356895 offline.go:203: Info: Initialized offline file "/tmp/scannerdefinitions-809842949/offline-scanner-v4-scanner-v4-defs.zip" from blob "/offline/scanner/v4/scanner-v4-defs.zip"
apitoken/creation: 2026/02/04 14:39:38.776465 log.go:31: Warn: An API token has been created {"err_code": "api-token-created", "api_token_name": "TSSC", "api_token_id": "80750b02-beed-4ec5-8d43-5d8d7e4e4527", "roles": ["Admin"], "user_id": "admin", "user_auth_provider": "basic Login with username/password"}
scannerdefinitions/handler: 2026/02/04 14:45:58.829863 offline.go:203: Info: Initialized offline file "/tmp/scannerdefinitions-809842949/offline-scanner-scanner-defs.zip" from blob "/offline/scanner/scanner-defs.zip"
cve/fetcher: 2026/02/04 14:46:22.109722 orchestrator.go:59: Info: Found 0 clusters to scan for orchestrator vulnerabilities.
cve/fetcher: 2026/02/04 14:46:22.110265 orchestrator.go:231: Info: Successfully fetched 0 Kubernetes CVEs
cve/fetcher: 2026/02/04 14:46:22.110485 orchestrator.go:231: Info: Successfully fetched 0 OpenShift CVEs
cve/fetcher: 2026/02/04 14:46:22.111814 orchestrator.go:231: Info: Successfully fetched 0 Istio CVEs
main: 2026/02/04 14:46:22.113624 main.go:714: Info: Registered integration "Stackrox Scanner"
reprocessor: 2026/02/04 14:46:22.114492 reprocessor.go:297: Info: Found 0 nodes to scan
reprocessor: 2026/02/04 14:46:22.114522 reprocessor.go:323: Info: Successfully reprocessed 0/0 nodes
reprocessor: 2026/02/04 14:46:22.115096 reprocessor.go:297: Info: Found 0 watched images to scan
reprocessor: 2026/02/04 14:46:22.115146 reprocessor.go:323: Info: Successfully reprocessed 0/0 watched images
reprocessor: 2026/02/04 14:46:22.116437 reprocessor.go:379: Info: Found 0 images to scan
cloudsources/manager: 2026/02/04 14:48:56.790443 manager.go:188: Info: Fetching discovered clusters from cloud sources
cloudsources/manager: 2026/02/04 14:48:56.790607 manager.go:191: Info: Received 0 discovered clusters from cloud sources