{"level":"info","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Operator Version: 0.0.1"} {"level":"info","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Go Version: go1.25.8 (Red Hat 1.25.8-1.module+el8.10.0+24168+9fd3a552) X:strictfipsruntime"} {"level":"info","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Go OS/Arch: linux/amd64"} {"level":"info","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Setting Up Manager"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Load KubeConfig"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Initialize Manager"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Initialize Scheme"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Getting Manager Options"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Adding Healthz and Readyz checks"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Registering Components"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Initialize Prometheus Registry"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Initialize Prometheus metrics endpoint","endpoint":"http://0.0.0.0:8383/metrics"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Initialize ConfigMap watcher"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Initialize Validation Engine"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Initialize Reconciler"} {"level":"info","ts":"2026-05-05T08:09:26Z","logger":"DeploymentValidation","msg":"Starting Manager"} {"level":"info","ts":"2026-05-05T08:09:26Z","msg":"starting server","name":"health probe","addr":"[::]:8081"} {"level":"info","ts":"2026-05-05T08:09:26Z","logger":"ConfigMapWatcher","msg":"a ConfigMap has been created under watched namespace","name":"deployment-validation-operator-config","namespace":"openshift-deployment-validation-operator"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"Current set of enabled checks","checks":"dangling-horizontalpodautoscaler, dangling-ingress, dangling-networkpolicy, dangling-networkpolicypeer-podselector, dangling-service, dangling-servicemonitor, dnsconfig-options, duplicate-env-var, env-value-from, host-ipc, host-network, host-pid, hpa-minimum-three-replicas, invalid-target-ports, job-ttl-seconds-after-finished, liveness-port, minimum-three-replicas, no-anti-affinity, no-node-affinity, non-existent-service-account, non-isolated-pod, pdb-max-unavailable, pdb-min-available, pdb-unhealthy-pod-eviction-policy, priority-class-name, privilege-escalation-container, privileged-container, readiness-port, restart-policy, run-as-non-root, scc-deny-privileged-container, schema-validation, sorted-keys, startup-port, unsafe-sysctls, unset-cpu-requirements, unset-memory-requirements"} {"level":"info","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"The ConfigMap has been updated"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-subscriptions,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-subscriptions,helm.sh/chart=tssc-subscriptions-1.9.0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-subscriptions\" not found"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-subscriptions-crds\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhdh\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-openshift-gitops-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhtas-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhtpa-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-subscriptions-crds\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhdh\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-gitops-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhbk-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtas-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtpa-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-subscriptions-crds\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhdh\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-gitops-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhbk-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtas-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtpa-operator\" has memory limit 0"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:11:28Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-generate-token\" is referring to an unknown secret \"tssc-gitops-cluster\""} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops\" not found"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-generate-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-store-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:13:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"info","ts":"2026-05-05T08:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:13:28.155845 1 request.go:752] "Waited before sending request" delay="1.13636065s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjAxMzMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhbk-operator\" not found"} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:13:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:13:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:13:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtpa-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:13:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:15:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:15:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:15:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:15:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:15:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:15:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:15:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:15:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:15:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:15:28.155549 1 request.go:752] "Waited before sending request" delay="1.414089392s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjEwMDAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:15:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:15:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:15:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:15:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:15:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:15:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:15:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:15:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:15:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:15:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:15:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:15:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:15:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:15:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:15:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:15:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:15:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:17:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:17:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:17:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:17:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:17:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:17:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:17:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:17:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:17:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:17:28.153767 1 request.go:752] "Waited before sending request" delay="1.251079534s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/null/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjIxNzEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T08:17:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:17:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:17:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:17:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:17:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:17:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:17:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:17:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:17:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:17:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:17:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:19:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:19:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:19:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:19:28.147877 1 request.go:752] "Waited before sending request" delay="1.000754923s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjMwOTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:19:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:19:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:19:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:19:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:21:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:21:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:21:28.154796 1 request.go:752] "Waited before sending request" delay="1.222052717s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjM5NDgsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:21:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:21:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:21:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:21:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:21:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:21:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:23:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:23:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:23:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:23:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:23:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:23:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:23:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:23:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:23:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:23:28.154792 1 request.go:752] "Waited before sending request" delay="1.375257761s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/null/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjUwNjksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T08:23:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:23:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:23:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:23:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:23:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:23:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:23:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:23:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:23:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:23:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:23:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:25:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:25:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:25:28.156536 1 request.go:752] "Waited before sending request" delay="1.301686636s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjU4ODQsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:25:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:25:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:25:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:25:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:25:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:25:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:27:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:27:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:27:28.151513 1 request.go:752] "Waited before sending request" delay="1.340399364s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjY3MDksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-05T08:27:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:27:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:27:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:27:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:27:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:27:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:27:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:27:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:27:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:27:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:29:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:29:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:29:28.153775 1 request.go:752] "Waited before sending request" delay="1.340277525s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjc4MjAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T08:29:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:29:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:29:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:29:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:29:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:29:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:29:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:29:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:29:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:29:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:29:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:31:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:31:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:31:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:31:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:31:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:31:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:31:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:31:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:31:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:31:28.150746 1 request.go:752] "Waited before sending request" delay="1.401866787s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/null/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg3MjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T08:31:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:31:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:31:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:31:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:31:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:31:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:31:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:31:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:31:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:31:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:31:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:33:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:33:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:33:28.151832 1 request.go:752] "Waited before sending request" delay="1.270258803s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkzMjAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:33:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:33:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:33:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:33:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:35:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:35:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:35:28.148535 1 request.go:752] "Waited before sending request" delay="1.282569823s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjk4MzYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:35:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:35:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:35:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:35:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:35:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:35:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:35:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:35:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:35:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:35:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:37:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:37:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:37:28.155499 1 request.go:752] "Waited before sending request" delay="1.22346523s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAzNjYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:37:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:37:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:37:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:37:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:39:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:39:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:39:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:39:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:39:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:39:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:39:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:39:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:39:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:39:28.151456 1 request.go:752] "Waited before sending request" delay="1.440801056s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/null/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA4ODYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T08:39:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:39:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:39:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:39:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:39:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:39:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:39:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:39:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:39:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:39:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:39:36Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:41:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:41:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:41:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:41:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:41:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:41:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:41:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:41:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:41:28.148466 1 request.go:752] "Waited before sending request" delay="1.469558558s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI2ODgsInN0YXJ0IjoidHNzYy1naXRvcHMtYXJnb2NkLXJlZGlzLWhhXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-repo-server\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-notifications-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=argocd-applicationset-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-applicationset-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-server\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-server\" not found"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-dex-server\" not found"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-dex-server\" not found"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-metrics","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app.kubernetes.io/name:tssc-gitops-application-controller])"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-applicationset-controller\" not found"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"redis\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-redis\" not found"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-repo-server)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-dex-server] []}) "} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-generate-token\" is referring to an unknown secret \"tssc-gitops-cluster\""} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops\" not found"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-generate-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-store-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:argocd-applicationset-controller] []}) "} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-application-controller\" is referring to an unknown config map \"argocd-cmd-params-cm\""} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-application-controller\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-application-controller\" not found"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-application-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-application-controller] []}) "} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:argocd-applicationset-controller] []}) "} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-dex-server] []}) "} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-repo-server] []}) "} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-notifications-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=argocd-applicationset-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-applicationset-controller)"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-server] []}) "} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-dex-server\" not found"} {"level":"debug","ts":"2026-05-05T08:41:28Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"info","ts":"2026-05-05T08:41:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:41:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:41:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:41:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:41:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:41:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:41:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:41:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:41:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:41:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:41:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:41:38.149240 1 request.go:752] "Waited before sending request" delay="1.906693039s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzI3NTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-05T08:41:38Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-generate-token\" is referring to an unknown secret \"tssc-gitops-cluster\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops\" not found"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-generate-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-store-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-generate-token\" is referring to an unknown secret \"tssc-gitops-cluster\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops\" not found"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-generate-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-store-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"Service","validation":"dangling-service","check_description":"Indicates when services do not have any associated deployments.","check_remediation":"Confirm that your service's selector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching service labels (map[app:keycloak app.kubernetes.io/instance:keycloak app.kubernetes.io/managed-by:keycloak-operator])"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"keycloak-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-iam,helm.sh/chart=tssc-iam-1.9.0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-iam\" not found"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak-keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"realm-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak-keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"realm-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak-keycloak\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-iam","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"realm-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:43:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-05T08:43:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:43:28.197829 1 request.go:752] "Waited before sending request" delay="1.253780316s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM2OTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T08:43:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:43:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:43:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:43:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:43:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:43:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:43:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:43:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:43:38.197827 1 request.go:752] "Waited before sending request" delay="1.994790239s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM4MDIsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3IudjEuMS40LXJoLTlFUEJOdEptSXNlTjhpbTN6YWVUZVUxSFNldTlkenBCZmNmRkJOXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:43:38Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:45:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:45:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:45:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:45:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:45:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:45:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:45:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:45:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:45:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:45:28.150124 1 request.go:752] "Waited before sending request" delay="1.284646067s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ3OTUsInN0YXJ0IjoidHNzYy1naXRvcHMtYXBwbGljYXRpb25zZXQtY29udHJvbGxlclx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:45:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:45:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:45:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"segment-backup-installation\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/instance=tssc-tas,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-tas,app.kubernetes.io/version=1.3,helm.sh/chart=tssc-tas-1.9.0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-tas\" not found"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"statefulsets-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"statefulsets-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"statefulsets-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-logserver\" not found"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,batch.kubernetes.io/job-name=ctlog-createtree-job-f2gzt,controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,job-name=ctlog-createtree-job-f2gzt"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,batch.kubernetes.io/job-name=rekor-createtree-job-zkwnw,controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,job-name=rekor-createtree-job-zkwnw"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,batch.kubernetes.io/job-name=segment-backup-installation-87cdj,controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,job-name=segment-backup-installation-87cdj"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:45:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:45:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:45:38.150178 1 request.go:752] "Waited before sending request" delay="1.885530792s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQ4NDgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"keycloak\" is referring to an unknown secret \"keycloak-initial-admin\""} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"keycloak\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-keycloak","object":"tssc-iam","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"keycloak\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:45:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:45:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:45:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:45:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:45:40Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:47:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:47:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:47:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:47:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,batch.kubernetes.io/job-name=rekor-createtree-job-zkwnw,controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,job-name=rekor-createtree-job-zkwnw"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-createtree-job\" not found"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/instance=tssc-tas,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-tas,app.kubernetes.io/version=1.3,helm.sh/chart=tssc-tas-1.9.0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-db\" not found"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,batch.kubernetes.io/job-name=ctlog-createtree-job-f2gzt,controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,job-name=ctlog-createtree-job-f2gzt"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"ctlog-createtree-job\" not found"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,batch.kubernetes.io/job-name=segment-backup-installation-87cdj,controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,job-name=segment-backup-installation-87cdj"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"segment-backup-installation\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has memory limit 0"} {"level":"info","ts":"2026-05-05T08:47:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:47:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:47:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:47:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:47:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:47:28.155515 1 request.go:752] "Waited before sending request" delay="1.265968945s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU1MjksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T08:47:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:47:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:47:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:47:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:47:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:47:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:47:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:47:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:47:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:47:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:47:38.155822 1 request.go:752] "Waited before sending request" delay="1.901684574s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU1ODEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:47:40Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:49:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:49:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:49:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:49:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,batch.kubernetes.io/job-name=ctlog-createtree-job-f2gzt,controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,job-name=ctlog-createtree-job-f2gzt"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-db\" not found"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,batch.kubernetes.io/job-name=rekor-createtree-job-zkwnw,controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,job-name=rekor-createtree-job-zkwnw"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,batch.kubernetes.io/job-name=segment-backup-installation-87cdj,controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,job-name=segment-backup-installation-87cdj"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"segment-backup-installation\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/instance=tssc-tas,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-tas,app.kubernetes.io/version=1.3,helm.sh/chart=tssc-tas-1.9.0"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T08:49:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:49:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:49:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:49:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:49:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:49:28.154936 1 request.go:752] "Waited before sending request" delay="1.361670639s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYyMDEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T08:49:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:49:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:49:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:49:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:49:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:49:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:49:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:49:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:49:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:49:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:49:38.155043 1 request.go:752] "Waited before sending request" delay="1.900110128s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYyNTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:49:40Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:51:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:51:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:51:28.151076 1 request.go:752] "Waited before sending request" delay="1.280811474s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzY5MDUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:51:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:51:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:51:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:51:38.152051 1 request.go:752] "Waited before sending request" delay="1.994288216s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzY5NDgsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,batch.kubernetes.io/job-name=ctlog-createtree-job-f2gzt,controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,job-name=ctlog-createtree-job-f2gzt"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"ctlog-createtree-job\" not found"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-db\" not found"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/instance=tssc-tas,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-tas,app.kubernetes.io/version=1.3,helm.sh/chart=tssc-tas-1.9.0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,batch.kubernetes.io/job-name=rekor-createtree-job-zkwnw,controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,job-name=rekor-createtree-job-zkwnw"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-createtree-job\" not found"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,batch.kubernetes.io/job-name=segment-backup-installation-87cdj,controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,job-name=segment-backup-installation-87cdj"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"segment-backup-installation\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:51:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T08:51:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:51:40Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:53:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:53:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:53:28.149345 1 request.go:752] "Waited before sending request" delay="1.383964302s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc1NTEsInN0YXJ0IjoidHNzYy1naXRvcHMtYXBwbGljYXRpb25zZXQtY29udHJvbGxlclx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:53:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:53:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:53:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,batch.kubernetes.io/job-name=segment-backup-installation-87cdj,controller-uid=9547daed-8b2f-4bf6-a2c0-47b39398128b,job-name=segment-backup-installation-87cdj"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/instance=tssc-tas,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-tas,app.kubernetes.io/version=1.3,helm.sh/chart=tssc-tas-1.9.0"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,batch.kubernetes.io/job-name=rekor-createtree-job-zkwnw,controller-uid=94c14aaf-c39e-4475-b921-c3f191b55296,job-name=rekor-createtree-job-zkwnw"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,batch.kubernetes.io/job-name=ctlog-createtree-job-f2gzt,controller-uid=4fdf365a-12d0-4cf6-9aad-dd6922b50f19,job-name=ctlog-createtree-job-f2gzt"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:53:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T08:53:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:53:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:53:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:53:40.150541 1 request.go:752] "Waited before sending request" delay="1.908960256s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc2NDEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T08:53:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:53:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:53:40Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:55:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:55:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:55:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-logserver\" not found"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-logsigner\" not found"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logsigner\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-f2gzt","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-zkwnw","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/instance=tssc-tas,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-tas,app.kubernetes.io/version=1.3,helm.sh/chart=tssc-tas-1.9.0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"segment-backup-installation\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-87cdj","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T08:55:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:55:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:55:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:55:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:55:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:55:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:55:28.204110 1 request.go:752] "Waited before sending request" delay="1.344155775s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzgyNDAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T08:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:55:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:55:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:55:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:55:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:55:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:55:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:55:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:55:40.205102 1 request.go:752] "Waited before sending request" delay="1.909963438s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzgyOTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-05T08:55:40Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:57:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-application-controller] []}) "} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:argocd-applicationset-controller] []}) "} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-dex-server] []}) "} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-repo-server] []}) "} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-notifications-controller)"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=argocd-applicationset-controller)"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-applicationset-controller)"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-server] []}) "} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:57:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:57:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logsigner\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logsigner\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-logsigner\" not found"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logsigner\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-xn6js\""} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-db\" not found"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T08:57:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T08:57:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:57:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:57:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:57:28.198566 1 request.go:752] "Waited before sending request" delay="1.532440592s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk1ODcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-05-05T08:57:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines-config,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines-config,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-config-1.9.0"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-pipelines-config\" not found"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T08:57:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-05T08:57:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:57:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:57:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:57:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:57:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:57:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:57:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:57:38.198641 1 request.go:752] "Waited before sending request" delay="1.906216376s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk4NzUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T08:57:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:57:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:57:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:57:46Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T08:59:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T08:59:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=8456446d4b,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-777b78c8d4,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-05T08:59:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"info","ts":"2026-05-05T08:59:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"info","ts":"2026-05-05T08:59:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"info","ts":"2026-05-05T08:59:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-dh,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-dh,app.kubernetes.io/version=1.9,helm.sh/chart=tssc-dh-1.9.0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhdh-kubernetes-plugin\" not found"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rollout-status-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rollout-status-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rollout-status-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-pipelines\" not found"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"tekton-chains-cosign\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tekton-chains-cosign\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"tssc-tekton-configuration","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"tekton-chains-cosign\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-05T08:59:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T08:59:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:59:28.151588 1 request.go:752] "Waited before sending request" delay="1.429814637s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI0MDgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T08:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T08:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T08:59:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:59:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T08:59:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:59:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:59:38.151828 1 request.go:752] "Waited before sending request" delay="1.994349105s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI0OTIsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,batch.kubernetes.io/job-name=migrate-db,controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,job-name=migrate-db"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=f85b8fcf4"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,batch.kubernetes.io/job-name=create-importers,controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,job-name=create-importers"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=d4554852-e579-410a-9f84-183e24562130,batch.kubernetes.io/job-name=create-db,controller-uid=d4554852-e579-410a-9f84-183e24562130,job-name=create-db"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T08:59:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T08:59:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"info","ts":"2026-05-05T08:59:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:59:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 08:59:48.151839 1 request.go:752] "Waited before sending request" delay="1.842094479s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI1OTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-application-controller] []}) "} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:argocd-applicationset-controller] []}) "} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-dex-server] []}) "} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-repo-server] []}) "} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-notifications-controller)"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=argocd-applicationset-controller)"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-applicationset-controller)"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-server] []}) "} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T08:59:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T08:59:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T08:59:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T08:59:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T08:59:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:00:00.152790 1 request.go:752] "Waited before sending request" delay="1.897817962s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDI3MDAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T09:00:02Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T09:01:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T09:01:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T09:01:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T09:01:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=8456446d4b,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-777b78c8d4,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-05T09:01:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-05T09:01:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:01:28.178833 1 request.go:752] "Waited before sending request" delay="1.534390909s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-development/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM1MDEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLXB1bGxlcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:01:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:01:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:01:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-05T09:01:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:01:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-05T09:01:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:01:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:01:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-05T09:01:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:01:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-dh,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-dh,app.kubernetes.io/version=1.9,helm.sh/chart=tssc-dh-1.9.0"} {"level":"debug","ts":"2026-05-05T09:01:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:01:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-05T09:01:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T09:01:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:01:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T09:01:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T09:01:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:01:40.179782 1 request.go:752] "Waited before sending request" delay="1.996195285s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM1ODcsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:01:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T09:01:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:01:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,batch.kubernetes.io/job-name=create-importers,controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,job-name=create-importers"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,batch.kubernetes.io/job-name=migrate-db,controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,job-name=migrate-db"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=f85b8fcf4"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=d4554852-e579-410a-9f84-183e24562130,batch.kubernetes.io/job-name=create-db,controller-uid=d4554852-e579-410a-9f84-183e24562130,job-name=create-db"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:01:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T09:01:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:01:50.180633 1 request.go:752] "Waited before sending request" delay="1.99704535s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-prod/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM2NzEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLXB1bGxlcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:01:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:01:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:01:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:01:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-05T09:01:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:01:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:02:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T09:02:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:02:02.178758 1 request.go:752] "Waited before sending request" delay="1.903012601s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/null/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDM3OTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T09:02:02Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T09:03:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:03:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,batch.kubernetes.io/job-name=create-importers,controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,job-name=create-importers"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=d4554852-e579-410a-9f84-183e24562130,batch.kubernetes.io/job-name=create-db,controller-uid=d4554852-e579-410a-9f84-183e24562130,job-name=create-db"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,batch.kubernetes.io/job-name=migrate-db,controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,job-name=migrate-db"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=f85b8fcf4"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T09:03:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-05T09:03:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:03:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T09:03:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:03:28.154758 1 request.go:752] "Waited before sending request" delay="1.475771819s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/null/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ1NDUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T09:03:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T09:03:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T09:03:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T09:03:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:03:38.154787 1 request.go:752] "Waited before sending request" delay="1.90018712s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ2MzUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:03:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T09:03:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T09:03:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=8456446d4b,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-777b78c8d4,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-05T09:03:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-05T09:03:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:03:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:03:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-05T09:03:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:03:50.155781 1 request.go:752] "Waited before sending request" delay="1.995151271s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-development/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ3MjAsInN0YXJ0Ijoic3lzdGVtOmltYWdlLXB1bGxlcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:03:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:03:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:03:50Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:50Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-05T09:03:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:03:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:03:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:03:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-05T09:03:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-05T09:03:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:03:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:03:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:03:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-05T09:03:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:03:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-dh,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-dh,app.kubernetes.io/version=1.9,helm.sh/chart=tssc-dh-1.9.0"} {"level":"debug","ts":"2026-05-05T09:03:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T09:03:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:03:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T09:03:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:03:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T09:03:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:04:02.156187 1 request.go:752] "Waited before sending request" delay="1.995043046s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDQ4MzMsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T09:04:02Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T09:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-05T09:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-05T09:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-05T09:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-dh,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-dh,app.kubernetes.io/version=1.9,helm.sh/chart=tssc-dh-1.9.0"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T09:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T09:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T09:05:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T09:05:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:05:28.162137 1 request.go:752] "Waited before sending request" delay="1.417548526s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU4OTUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T09:05:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,batch.kubernetes.io/job-name=create-importers,controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,job-name=create-importers"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,batch.kubernetes.io/job-name=migrate-db,controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,job-name=migrate-db"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=f85b8fcf4"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=d4554852-e579-410a-9f84-183e24562130,batch.kubernetes.io/job-name=create-db,controller-uid=d4554852-e579-410a-9f84-183e24562130,job-name=create-db"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:05:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T09:05:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:05:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:05:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-05T09:05:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:05:40.163364 1 request.go:752] "Waited before sending request" delay="1.997044321s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDU5NzAsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-05-05T09:05:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:05:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T09:05:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:05:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:05:52.162336 1 request.go:752] "Waited before sending request" delay="1.994029081s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDYwODYsInN0YXJ0IjoicmVrb3ItY3JlYXRldHJlZS1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:05:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T09:05:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T09:05:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T09:05:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:05:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T09:05:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T09:05:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:06:02.163410 1 request.go:752] "Waited before sending request" delay="1.995052698s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDYxNzEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=8456446d4b,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-777b78c8d4,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-05T09:06:02Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T09:07:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-05T09:07:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-05T09:07:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-05T09:07:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T09:07:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T09:07:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:07:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T09:07:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:07:28.161714 1 request.go:752] "Waited before sending request" delay="1.410409504s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDcwNjAsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T09:07:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=f85b8fcf4"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=d4554852-e579-410a-9f84-183e24562130,batch.kubernetes.io/job-name=create-db,controller-uid=d4554852-e579-410a-9f84-183e24562130,job-name=create-db"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,batch.kubernetes.io/job-name=create-importers,controller-uid=99dd5b4b-192f-4ad5-8c9f-8ffa953365df,job-name=create-importers"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,batch.kubernetes.io/job-name=migrate-db,controller-uid=f46ab667-e8a5-4e4e-ab5b-c7cfb54ba1de,job-name=migrate-db"} {"level":"debug","ts":"2026-05-05T09:07:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T09:07:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:07:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:07:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-05T09:07:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:07:38.161956 1 request.go:752] "Waited before sending request" delay="1.883590391s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDcxNjIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"info","ts":"2026-05-05T09:07:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:07:46Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T09:07:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:07:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:07:50.162791 1 request.go:752] "Waited before sending request" delay="1.781531365s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc0NjIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:07:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T09:07:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T09:07:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T09:07:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:07:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T09:07:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T09:07:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:08:02.161763 1 request.go:752] "Waited before sending request" delay="1.994414417s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDc4MzQsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=8456446d4b,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-777b78c8d4,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-05T09:08:02Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T09:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T09:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=8456446d4b,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-777b78c8d4,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-05T09:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-d3df2caf84,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,apps.kubernetes.io/pod-index=0,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,controller-revision-hash=affinity-assistant-d3df2caf84-76f69bf467,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,statefulset.kubernetes.io/pod-name=affinity-assistant-d3df2caf84-0,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-d3df2caf84","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-d3df2caf84","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-d3df2caf84","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-d3df2caf84","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-d3df2caf84","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-clone-repository,tekton.dev/taskRunUID=e887be2d-70f9-4a3b-9d50-3326fbadb4c7"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pue87560044b5cd804e9c81d8a173f2e53-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build,tekton.dev/taskRunUID=2b0a787a-4f73-4366-9c63-908ac15cd300"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-d3df2caf84,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-b279fd7b30,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,apps.kubernetes.io/pod-index=0,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,controller-revision-hash=affinity-assistant-b279fd7b30-55df68f97b,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,statefulset.kubernetes.io/pod-name=affinity-assistant-b279fd7b30-0,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b279fd7b30","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b279fd7b30","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b279fd7b30","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b279fd7b30","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b279fd7b30","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-build,tekton.dev/taskRunUID=c2e2b7ed-224f-461a-be59-cfb4b3ca48e2"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository,tekton.dev/taskRunUID=cf5bf6ac-7d1f-49cb-807a-2884db4b23c4"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-b279fd7b30,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-05T09:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-05T09:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-05T09:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-05T09:09:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T09:09:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:09:28.156755 1 request.go:752] "Waited before sending request" delay="1.372960131s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDkwMzgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T09:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T09:09:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:09:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T09:09:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:09:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:09:38.157208 1 request.go:752] "Waited before sending request" delay="1.994962446s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDkxMTAsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=f85b8fcf4"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:09:38Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T09:09:38Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-kltungpp","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-kltungpp","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-kltungpp","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-kltungpp","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-kltungpp","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-odmmemua","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-odmmemua","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-odmmemua","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-odmmemua","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-odmmemua","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:09:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-05T09:09:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:09:46Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:09:50.156784 1 request.go:752] "Waited before sending request" delay="1.995144688s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDkyMTMsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:09:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T09:09:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:09:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T09:09:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T09:09:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:10:02.157122 1 request.go:752] "Waited before sending request" delay="1.993513307s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDk0OTgsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T09:10:02Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T09:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=f85b8fcf4"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T09:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-05T09:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T09:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:11:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:11:28.164050 1 request.go:752] "Waited before sending request" delay="1.485370443s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTA5NjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:30Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T09:11:30Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T09:11:34Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T09:11:34Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T09:11:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T09:11:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:11:40.163817 1 request.go:752] "Waited before sending request" delay="1.995238225s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTEwNDcsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=8456446d4b,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-777b78c8d4,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-05T09:11:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-05T09:11:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-8fceaef326,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,apps.kubernetes.io/pod-index=0,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,controller-revision-hash=affinity-assistant-8fceaef326-6c674855d9,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,statefulset.kubernetes.io/pod-name=affinity-assistant-8fceaef326-0,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-8fceaef326","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-8fceaef326","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-8fceaef326","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-8fceaef326","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-8fceaef326","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize,tekton.dev/taskRunUID=7e615dd0-5d41-4f2d-8400-6f24e5cdae93"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-summary\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan,tekton.dev/taskRunUID=a5bbd7dd-0158-4e8a-b35e-639872a50dcc"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-scan\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-scan\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-scan\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-scan\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository,tekton.dev/taskRunUID=cf5bf6ac-7d1f-49cb-807a-2884db4b23c4"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-deploy,tekton.dev/taskRunUID=dca9a577-9020-46a7-a10e-e3cf31a5c33d"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-deploy\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deploy-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check,tekton.dev/taskRunUID=b0a47e8c-265e-42a9-ac4c-b4cf13bc34f3"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-deploy-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository,tekton.dev/taskRunUID=330c3e41-20bf-4302-9042-ff651f34ee55"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build,tekton.dev/taskRunUID=2b0a787a-4f73-4366-9c63-908ac15cd300"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-show-sbom,tekton.dev/taskRunUID=7fff8b49-e0f0-45da-95c6-f969d2258e1d"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-build,tekton.dev/taskRunUID=c2e2b7ed-224f-461a-be59-cfb4b3ca48e2"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-show-sbom,tekton.dev/taskRunUID=97ed1e6e-00f2-475d-9057-f0ed9ea5d9d9"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-summarize,tekton.dev/taskRunUID=c6438cd9-5290-4816-9c3d-be412211a3dc"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-59brg-summarize-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-8fceaef326,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-clone-repository,tekton.dev/taskRunUID=e887be2d-70f9-4a3b-9d50-3326fbadb4c7"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-scan,tekton.dev/taskRunUID=f7b9ae25-3eef-4ee8-89c7-ae14d64acc28"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382837107,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-build,tekton.dev/taskRunUID=6f3a115d-cde4-4366-9bbc-e1a830081594"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-05T09:11:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-05T09:11:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:11:52.163785 1 request.go:752] "Waited before sending request" delay="1.995220485s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-stage/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTExNzEsInN0YXJ0Ijoic3lzdGVtOmltYWdlLXB1bGxlcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:11:52Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-05T09:11:52Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-05T09:11:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:11:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-05T09:11:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:11:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:11:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T09:11:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:11:56Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T09:11:56Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T09:11:56Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:12:00Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T09:12:00Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:12:02.164357 1 request.go:752] "Waited before sending request" delay="1.901947169s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTEzMDQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T09:12:02Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"info","ts":"2026-05-05T09:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05052026-084026-UTC,pod-template-hash=775fb4ddfc"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=7848249f-2743-4b46-8d0f-13924100d41a,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-05T09:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-05T09:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=79d4f7584"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5c9476c4f"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=5f85c77459"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7b97d66fc4"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-05T09:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-6cc644d54,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,batch.kubernetes.io/job-name=tssc-iam,controller-uid=b54defdc-7116-478a-9b78-88c9dd42af51,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-05T09:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"debug","ts":"2026-05-05T09:13:26Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q3l3cs8limt4omknh95f95g668k8qia"} {"level":"info","ts":"2026-05-05T09:13:26Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:13:28.200959 1 request.go:752] "Waited before sending request" delay="1.483705481s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI0NzQsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=8456446d4b,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-777b78c8d4,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-05T09:13:28Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-05T09:13:28Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-deploy,tekton.dev/taskRunUID=dca9a577-9020-46a7-a10e-e3cf31a5c33d"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-deployment-check,tekton.dev/taskRunUID=b0a47e8c-265e-42a9-ac4c-b4cf13bc34f3"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382837107,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy,tekton.dev/taskRunUID=f4a6c329-66a1-42be-93e2-8a6f7870e6a6"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-deploy\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deploy-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382837107,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-scan,tekton.dev/taskRunUID=502e8052-cd3b-4e3b-a411-53257dc52336"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-scan\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-scan\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-scan\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-scan\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-show-sbom,tekton.dev/taskRunUID=7fff8b49-e0f0-45da-95c6-f969d2258e1d"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-summarize,tekton.dev/taskRunUID=c6438cd9-5290-4816-9c3d-be412211a3dc"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382837107,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check,tekton.dev/taskRunUID=e69d17d2-c7a1-4916-a1bd-91e7054cd223"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-deploy-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382837107,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-build,tekton.dev/taskRunUID=6f3a115d-cde4-4366-9bbc-e1a830081594"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has cpu request 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-summarize,tekton.dev/taskRunUID=7e615dd0-5d41-4f2d-8400-6f24e5cdae93"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-clone-repository,tekton.dev/taskRunUID=cf5bf6ac-7d1f-49cb-807a-2884db4b23c4"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-scan,tekton.dev/taskRunUID=f7b9ae25-3eef-4ee8-89c7-ae14d64acc28"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382837107,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize,tekton.dev/taskRunUID=c8801b5a-a0c4-4959-a6a2-3c932237acb0"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-oqxsozzg-on-push-wrsz9-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-summary\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-build,tekton.dev/taskRunUID=2b0a787a-4f73-4366-9c63-908ac15cd300"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-show-sbom,tekton.dev/taskRunUID=97ed1e6e-00f2-475d-9057-f0ed9ea5d9d9"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-clone-repository,tekton.dev/taskRunUID=330c3e41-20bf-4302-9042-ff651f34ee55"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382837107,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=5c123aab1382653ed5499b8c3bb66c2b5f78dd00,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-wrsz9,tekton.dev/pipelineRunUID=6e3ce37b-c1b1-4cf3-9586-b15d07c9c923,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-wrsz9-show-sbom,tekton.dev/taskRunUID=4eaf35cf-d63f-450f-b99c-f5fac8b2ed84"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-clone-repository,tekton.dev/taskRunUID=e887be2d-70f9-4a3b-9d50-3326fbadb4c7"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382520694,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=1aaa7c3f4f7600282c40fd9a741fcb12000eff53,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z,tekton.dev/pipelineRunUID=4aa8c3d8-22c0-4a5e-b00e-e57eab248e15,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-pull-request-6sn8z-scan,tekton.dev/taskRunUID=a5bbd7dd-0158-4e8a-b35e-639872a50dcc"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pipelinesascode.tekton.dev/check-run-id=74382368472,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-oqxsozzg-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-oqxsozzg-repository,pipelinesascode.tekton.dev/sha=ebf7749c32714fe907f63d3241d9e688f6f9f63f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-oqxsozzg,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRun=e2e-tests-go-oqxsozzg-on-push-59brg,tekton.dev/pipelineRunUID=38a7f4a6-1165-433c-a5aa-4aec181079a3,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-oqxsozzg-on-push-59brg-build,tekton.dev/taskRunUID=c2e2b7ed-224f-461a-be59-cfb4b3ca48e2"} {"level":"debug","ts":"2026-05-05T09:13:32Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-05T09:13:32Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=7d4cff5884"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-oqxsozzg","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:13:36Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-05T09:13:36Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:13:38.201804 1 request.go:752] "Waited before sending request" delay="1.892868669s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-stage/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI1NjUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:13:40Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-05T09:13:40Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=98a8a716-f383-4128-9ba3-bfbf0c526a7a,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-05T09:13:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:13:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:13:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-05T09:13:42Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-05T09:13:42Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-05T09:13:42Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-05T09:13:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:44Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-05T09:13:44Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-05T09:13:44Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=cOdK84vKgnaRLenln58KtpXCI40xI5jsgYOhU0,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.1,olm.permissions.hash=4Z6mzHw3Gux72vIWxroUVRIpSW5IOUFnONBDgt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=cf796b885"} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-05T09:13:48Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-05T09:13:48Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:13:50.201788 1 request.go:752] "Waited before sending request" delay="1.892947238s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-agent-addon/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI3MDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"info","ts":"2026-05-05T09:13:50Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=f85b8fcf4"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-05T09:13:54Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-05T09:13:54Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-kltungpp,app.kubernetes.io/part-of=e2e-tests-go-kltungpp,argocd/app-name=e2e-tests-go-kltungpp,backstage.io/kubernetes-id=e2e-tests-go-kltungpp,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-kltungpp,pod-template-hash=6c4bd6db7c"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-odmmemua,app.kubernetes.io/part-of=e2e-tests-go-odmmemua,argocd/app-name=e2e-tests-go-odmmemua,backstage.io/kubernetes-id=e2e-tests-go-odmmemua,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-odmmemua,pod-template-hash=d6c98486b"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-oqxsozzg,app.kubernetes.io/part-of=e2e-tests-go-oqxsozzg,argocd/app-name=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-id=e2e-tests-go-oqxsozzg,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-oqxsozzg,pod-template-hash=66f4966997"} {"level":"debug","ts":"2026-05-05T09:13:58Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-05T09:13:58Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0505 09:14:02.201636 1 request.go:752] "Waited before sending request" delay="1.995046449s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NTI4MjIsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-05-05T09:14:02Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"}