{"level":"info","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Operator Version: 0.0.1"} {"level":"info","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Go Version: go1.25.8 (Red Hat 1.25.8-1.module+el8.10.0+24168+9fd3a552) X:strictfipsruntime"} {"level":"info","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Go OS/Arch: linux/amd64"} {"level":"info","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Setting Up Manager"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Load KubeConfig"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Initialize Manager"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Initialize Scheme"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Getting Manager Options"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Adding Healthz and Readyz checks"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Registering Components"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Initialize Prometheus Registry"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Initialize Prometheus metrics endpoint","endpoint":"http://0.0.0.0:8383/metrics"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Initialize ConfigMap watcher"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Initialize Validation Engine"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Initialize Reconciler"} {"level":"info","ts":"2026-05-08T18:07:07Z","logger":"DeploymentValidation","msg":"Starting Manager"} {"level":"info","ts":"2026-05-08T18:07:07Z","msg":"starting server","name":"health probe","addr":"[::]:8081"} {"level":"info","ts":"2026-05-08T18:07:07Z","logger":"ConfigMapWatcher","msg":"a ConfigMap has been created under watched namespace","name":"deployment-validation-operator-config","namespace":"openshift-deployment-validation-operator"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"Current set of enabled checks","checks":"dangling-horizontalpodautoscaler, dangling-ingress, dangling-networkpolicy, dangling-networkpolicypeer-podselector, dangling-service, dangling-servicemonitor, dnsconfig-options, duplicate-env-var, env-value-from, host-ipc, host-network, host-pid, hpa-minimum-three-replicas, invalid-target-ports, job-ttl-seconds-after-finished, liveness-port, minimum-three-replicas, no-anti-affinity, no-node-affinity, non-existent-service-account, non-isolated-pod, pdb-max-unavailable, pdb-min-available, pdb-unhealthy-pod-eviction-policy, priority-class-name, privilege-escalation-container, privileged-container, readiness-port, restart-policy, run-as-non-root, scc-deny-privileged-container, schema-validation, sorted-keys, startup-port, unsafe-sysctls, unset-cpu-requirements, unset-memory-requirements"} {"level":"info","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"The ConfigMap has been updated"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:07:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"info","ts":"2026-05-08T18:07:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhbk-operator\" not found"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhbk-operator\" not found"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"rhbk-operator","object":"rhbk-operator","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"info","ts":"2026-05-08T18:07:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:07:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtpa-operator-controller-manager\" not found"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"rhtpa-operator-controller-manager","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"manager\" does not expose port 8081 for the HTTPGet"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:07:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"info","ts":"2026-05-08T18:07:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:07:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:07:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:07:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:07:11.484260 1 request.go:752] "Waited before sending request" delay="1.606667659s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MTY2MDcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-subscriptions,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-subscriptions,helm.sh/chart=tssc-subscriptions-1.9.0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-subscriptions\" not found"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-subscriptions-crds\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhdh\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-openshift-gitops-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhbk-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhtas-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rhtpa-operator\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-subscriptions-crds\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhdh\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-gitops-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhbk-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtas-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtpa-operator\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-subscriptions-crds\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhdh\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-gitops-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhbk-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-openshift-pipelines-operator-rh\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtas-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-subscriptions","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rhtpa-operator\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:07:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-08T18:07:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-infrastructure,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-infrastructure,helm.sh/chart=tssc-infrastructure-1.9.0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"test-tpa-pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"test-keycloak-pgsql-bee\" is referring to an unknown secret \"keycloak-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-infrastructure\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-tpa-pgsql-bee\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-infrastructure","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-keycloak-pgsql-bee\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-08T18:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-generate-token\" is referring to an unknown secret \"tssc-gitops-cluster\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-generate-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"argocd-store-token\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-generate-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-post-deploy","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-store-token\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-dex-server] []}) "} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-application-controller\" is referring to an unknown config map \"argocd-cmd-params-cm\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-application-controller\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-application-controller\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-application-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-application-controller\" is referring to an unknown config map \"argocd-cmd-params-cm\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-application-controller\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-application-controller\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-application-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-application-controller] []}) "} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:argocd-applicationset-controller] []}) "} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-dex-server] []}) "} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-repo-server] []}) "} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-notifications-controller)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=argocd-applicationset-controller)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-applicationset-controller)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-server] []}) "} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-server\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-server\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-server\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-server\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-application-controller\" is referring to an unknown config map \"argocd-cmd-params-cm\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-application-controller\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-application-controller\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller","kind":"StatefulSet","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"argocd-application-controller\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"redis\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-redis\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-repo-server)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-redis-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"argocd-server\" is referring to an unknown secret \"tssc-gitops-redis-initial-password\""} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-server\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-dex-server\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-gitops-argocd-dex-server\" not found"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"info","ts":"2026-05-08T18:09:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:09:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:09:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:09:09.323661 1 request.go:752] "Waited before sending request" delay="1.264416035s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjE3NTEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"cli-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:09:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"trusted-artifact-signer","object":"cli-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"cli-server\" has memory limit 0"} {"level":"info","ts":"2026-05-08T18:09:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:09:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:09:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-08T18:09:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:09:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:09:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:09:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:09:19Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"fulcio-server\" is referring to an unknown secret \"fulcio-cert-trusted-artifact-signerhnr2m\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"fulcio\" not found"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"fulcio-server\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"fulcio-server\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"fulcio-server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"fulcio-server\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-s29sk","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-s29sk","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-s29sk","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-s29sk","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhtas-segment-backup-job\" not found"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-s29sk","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-s29sk","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"segment-backup-installation\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-s29sk","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"segment-backup-installation-s29sk","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"segment-backup-installation\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rekor-createtree-job\" not found"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logserver\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"trillian-logserver\" not found"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logserver\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logserver\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logserver","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logserver\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logsigner\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"wait-for-trillian-db\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-logsigner\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"liveness-port","check_description":"Indicates when containers have a liveness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the liveness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"readiness-port","check_description":"Indicates when containers have a readiness probe to a not exposed port.","check_remediation":"Check which ports you've exposed and ensure they match what you have specified in the readiness probe.","check_failure_reason":"container \"trillian-logsigner\" does not expose port 8090 for the HTTPGet"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"wait-for-trillian-db\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"trillian-logsigner\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"wait-for-trillian-db\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-logsigner","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"trillian-logsigner\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-vd4bn","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-vd4bn","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-vd4bn","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-vd4bn","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-vd4bn","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-vd4bn","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog-createtree-job-vd4bn","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"job-ttl-seconds-after-finished","check_description":"Indicates when standalone jobs do not set ttlSecondsAfterFinished and when jobs managed by cronjob do set ttlSecondsAfterFinished.","check_remediation":"Set Job.spec.ttlSecondsAfterFinished. Unset CronJob.Spec.JobTemplate.Spec.ttlSecondsAfterFinished.","check_failure_reason":"Standalone Job does not specify ttlSecondsAfterFinished"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"createtree\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"rekor-createtree-job-bzhkr","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"createtree\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"trillian-db","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"trillian-db\" is referring to an unknown secret \"trillian-db-connection-w247c\""} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/instance=tssc-tas,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-tas,app.kubernetes.io/version=1.3,helm.sh/chart=tssc-tas-1.9.0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"test-tssc-tas","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"statefulsets-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:11:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:11:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:11:08Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:11:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:11:09.409239 1 request.go:752] "Waited before sending request" delay="1.306800334s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjMzMDksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:11:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:11:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:11:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:11:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:11:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"pgsql-bee\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"tpa-pgsql-bee","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:11:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:11:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:11:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:11:19.409345 1 request.go:752] "Waited before sending request" delay="1.893189514s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjM1NjQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:11:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:11:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:11:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines-config,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines-config,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-config-1.9.0"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-pipelines-config\" not found"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-pipelines-config","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"test-rollout-openshift-pipelines\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:11:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"info","ts":"2026-05-08T18:11:21Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,batch.kubernetes.io/job-name=migrate-db,controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,job-name=migrate-db"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"migrate-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=tssc-tpa,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-tpa,app.kubernetes.io/version=2.2.0,helm.sh/chart=tssc-tpa-1.9.0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"tssc-tpa\" not found"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"deployments-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"deployments-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"test-tssc-tpa","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"deployments-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,batch.kubernetes.io/job-name=create-importers,controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,job-name=create-importers"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-importers","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/managed-by=Helm,helmet.redhat-appstudio.github.com/post-deploy=delete"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,batch.kubernetes.io/job-name=create-db,controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,job-name=create-db"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"job\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"job\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"create-db","kind":"Job","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"job\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:13:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"tuf","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tas","object":"ctlog","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:13:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"info","ts":"2026-05-08T18:13:08Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:13:09.320541 1 request.go:752] "Waited before sending request" delay="1.28383437s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhtpa-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjY2ODYsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"info","ts":"2026-05-08T18:13:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:13:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:13:19.321417 1 request.go:752] "Waited before sending request" delay="1.993709861s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjY3NTgsInN0YXJ0IjoidHNzYy1naXRvcHMtYXJnb2NkLXJlZGlzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-application-controller] []}) "} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:argocd-applicationset-controller] []}) "} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-dex-server] []}) "} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-repo-server] []}) "} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-notifications-controller)"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=argocd-applicationset-controller)"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-applicationset-controller)"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-server] []}) "} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:13:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:13:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:13:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:13:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:13:27Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-dh,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-dh,app.kubernetes.io/version=1.9,helm.sh/chart=tssc-dh-1.9.0"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"rhdh-kubernetes-plugin\" not found"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"copy-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"rollout-status-test\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rollout-status-test\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"copy-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc","object":"test-tssc-dh","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"rollout-status-test\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-08T18:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"info","ts":"2026-05-08T18:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:15:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:15:09.304428 1 request.go:752] "Waited before sending request" delay="1.40300683s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg4NDAsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-6865ffdb79,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-psql-developer-hub","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=85cbfd7896,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:09Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"info","ts":"2026-05-08T18:15:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-application-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-application-controller] []}) "} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-applicationset-controller-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:argocd-applicationset-controller] []}) "} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-dex-server] []}) "} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-dex-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-repo-server] []}) "} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-application-controller)"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-server)"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-notifications-controller)"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=argocd-applicationset-controller)"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-repo-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicypeer-podselector","check_description":"Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.","check_remediation":"Confirm that your NetworkPolicy's Ingress/Egress peer's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy rule's podSelector labels (app.kubernetes.io/name=tssc-gitops-applicationset-controller)"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-gitops","object":"tssc-gitops-server-network-policy","kind":"NetworkPolicy","validation":"dangling-networkpolicy","check_description":"Indicates when networkpolicies do not have any associated deployments.","check_remediation":"Confirm that your networkPolicy's podselector correctly matches the labels on one of your deployments.","check_failure_reason":"no pods found matching networkpolicy's podSelector labels ({map[app.kubernetes.io/name:tssc-gitops-server] []}) "} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:15:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:15:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:15:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:15:21.305644 1 request.go:752] "Waited before sending request" delay="1.920037664s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mjg5NjEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:15:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:15:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"info","ts":"2026-05-08T18:15:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"info","ts":"2026-05-08T18:15:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:15:33.305513 1 request.go:752] "Waited before sending request" delay="1.918967689s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-development/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MjkwOTYsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:15:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"info","ts":"2026-05-08T18:15:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:15:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:15:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:15:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:15:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,batch.kubernetes.io/job-name=migrate-db,controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,job-name=migrate-db"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,batch.kubernetes.io/job-name=create-importers,controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,job-name=create-importers"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,batch.kubernetes.io/job-name=create-db,controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,job-name=create-db"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:15:43Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-08T18:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-08T18:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-08T18:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:17:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:17:09.325664 1 request.go:752] "Waited before sending request" delay="1.429847514s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAyMjUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,batch.kubernetes.io/job-name=create-db,controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,job-name=create-db"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,batch.kubernetes.io/job-name=migrate-db,controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,job-name=migrate-db"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,batch.kubernetes.io/job-name=create-importers,controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,job-name=create-importers"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:17:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:17:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:17:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:17:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:17:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-dh,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-dh,app.kubernetes.io/version=1.9,helm.sh/chart=tssc-dh-1.9.0"} {"level":"debug","ts":"2026-05-08T18:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:17:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:17:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:17:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:17:19.325694 1 request.go:752] "Waited before sending request" delay="1.839178503s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzAzMjUsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMFx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:17:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-08T18:17:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:17:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:17:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-08T18:17:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:17:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:17:31.325633 1 request.go:752] "Waited before sending request" delay="1.907056291s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA0NTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=85cbfd7896,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-6865ffdb79,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-08T18:17:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-08T18:17:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:17:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:17:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:17:41.326685 1 request.go:752] "Waited before sending request" delay="1.89795615s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzA1NjcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:17:43Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:19:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-dh,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-dh,app.kubernetes.io/version=1.9,helm.sh/chart=tssc-dh-1.9.0"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:19:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-08T18:19:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-08T18:19:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:19:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=85cbfd7896,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-6865ffdb79,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-08T18:19:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-08T18:19:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:19:09.323676 1 request.go:752] "Waited before sending request" delay="1.374984539s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE1ODgsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:19:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:19:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:19:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:19:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:19:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:19:21.323938 1 request.go:752] "Waited before sending request" delay="1.903821815s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-ci/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE3MTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:19:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:19:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:19:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-08T18:19:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:19:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-08T18:19:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:19:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:19:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-08T18:19:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:19:33.324250 1 request.go:752] "Waited before sending request" delay="1.904959868s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzE4NTIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:19:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:19:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:19:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:19:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:19:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,batch.kubernetes.io/job-name=create-db,controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,job-name=create-db"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,batch.kubernetes.io/job-name=create-importers,controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,job-name=create-importers"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,batch.kubernetes.io/job-name=migrate-db,controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,job-name=migrate-db"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:19:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:19:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:19:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:19:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:19:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:19:43Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:21:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-08T18:21:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-08T18:21:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:21:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=85cbfd7896,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-dh","object":"backstage-developer-hub","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-6865ffdb79,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-08T18:21:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-08T18:21:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:21:09.399348 1 request.go:752] "Waited before sending request" delay="1.517758757s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM1ODgsInN0YXJ0IjoidHNzYy1naXRvcHMtYXJnb2NkLXJlZGlzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:21:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:21:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:21:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:21:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:21:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:21:19.399548 1 request.go:752] "Waited before sending request" delay="1.897580919s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-ci/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM3NDEsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-9070e25838,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,apps.kubernetes.io/pod-index=0,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,controller-revision-hash=affinity-assistant-9070e25838-58dcc98d79,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,statefulset.kubernetes.io/pod-name=affinity-assistant-9070e25838-0,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-9070e25838","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-9070e25838","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-9070e25838","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-9070e25838","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-9070e25838","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository,tekton.dev/taskRunUID=4f742a4e-998a-4856-ba82-9b99eee34ae1"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-9070e25838,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-08T18:21:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:21:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-08T18:21:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:29Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"info","ts":"2026-05-08T18:21:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:21:31.399946 1 request.go:752] "Waited before sending request" delay="1.901957853s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzM5OTMsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:21:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:21:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:21:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:21:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:21:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=migrate-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=migrate-db,batch.kubernetes.io/controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,batch.kubernetes.io/job-name=migrate-db,controller-uid=53dfdfaf-3135-418a-8e39-65ba93564f47,job-name=migrate-db"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-db,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-db,batch.kubernetes.io/controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,batch.kubernetes.io/job-name=create-db,controller-uid=b20017de-dc00-49ea-9f4e-eb9cfe17aaca,job-name=create-db"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=create-importers,batch.kubernetes.io/controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,batch.kubernetes.io/job-name=create-importers,controller-uid=4626585e-bc8b-4736-a4f1-6acab5fb9170,job-name=create-importers"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/component=database,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=create-importers,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:21:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:21:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:21:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:21:41Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:21:41Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:21:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:21:43.399444 1 request.go:752] "Waited before sending request" delay="1.908763904s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzQxNjgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:21:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:21:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:21:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:21:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:21:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:21:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:21:43Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:23:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-08T18:23:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:23:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=85cbfd7896,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-6865ffdb79,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-08T18:23:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:23:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:23:09.332611 1 request.go:752] "Waited before sending request" delay="1.534735016s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU2NzcsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:23:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:23:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:23:13Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:23:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-b3263d372b,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-b3263d372b,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,apps.kubernetes.io/pod-index=0,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,controller-revision-hash=affinity-assistant-b3263d372b-6c676b6f8c,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,statefulset.kubernetes.io/pod-name=affinity-assistant-b3263d372b-0,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-b3263d372b","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-clone-repository,tekton.dev/taskRunUID=5de5d729-6886-4c64-88e6-b99f16be721e"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pu410f6b96c689e94da5e8cdb8e68fc712-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build,tekton.dev/taskRunUID=3655e2c3-644e-4696-9923-dd6ae901bb3c"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-build,tekton.dev/taskRunUID=940e6104-38e6-49ff-aae5-10a6007029c1"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository,tekton.dev/taskRunUID=4f742a4e-998a-4856-ba82-9b99eee34ae1"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-deploy,tekton.dev/taskRunUID=d3a808a6-8eb4-4c8b-9efc-f2e7c39496f3"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-deployment-check,tekton.dev/taskRunUID=cd95fef3-1135-4511-8856-e20157f34c5d"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-scan,tekton.dev/taskRunUID=91e5e2c6-fa87-4c37-a53e-caff2cc46184"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-show-sbom,tekton.dev/taskRunUID=4b8b79f0-5981-4342-b687-68e0438656c3"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-summarize,tekton.dev/taskRunUID=60f2e7dd-4bc9-48e1-940c-cac5d6ee90ad"} {"level":"debug","ts":"2026-05-08T18:23:17Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-vmg2h-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"info","ts":"2026-05-08T18:23:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:23:21.332583 1 request.go:752] "Waited before sending request" delay="1.995456282s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-prod/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU4MjgsInN0YXJ0Ijoic3lzdGVtOmltYWdlLXB1bGxlcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-prod","object":"e2e-tests-go-nnbbqufc","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:21Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-08T18:23:21Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qkdjwyus","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:25Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"info","ts":"2026-05-08T18:23:25Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:23:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:23:29Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:23:31.333217 1 request.go:752] "Waited before sending request" delay="1.896954367s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzU5NTcsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:23:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:23:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:23:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:23:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:23:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:23:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:23:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:23:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:23:43.332852 1 request.go:752] "Waited before sending request" delay="1.995683769s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tas/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzYxMjcsInN0YXJ0IjoicmVrb3ItY3JlYXRldHJlZS1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-08T18:23:43Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:25:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-08T18:25:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:25:09.316581 1 request.go:752] "Waited before sending request" delay="1.295221413s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-stage/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc1NDgsInN0YXJ0Ijoic3lzdGVtOmltYWdlLXB1bGxlcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:25:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-08T18:25:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:25:13Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=85cbfd7896,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-6865ffdb79,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-08T18:25:17Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-08T18:25:17Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:25:19.316602 1 request.go:752] "Waited before sending request" delay="1.872385784s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc2NTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtMVx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:25:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:25:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:25:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:25:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:25:31.316385 1 request.go:752] "Waited before sending request" delay="1.995590923s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/rhbk-operator/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc3NzMsInN0YXJ0Ijoicmhiay1vcGVyYXRvci52MjYuNC4xMS1vcHIuMlx1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:25:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:25:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-604d7764f6,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,apps.kubernetes.io/pod-index=0,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,controller-revision-hash=affinity-assistant-604d7764f6-6d86786f5d,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,statefulset.kubernetes.io/pod-name=affinity-assistant-604d7764f6-0,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-604d7764f6","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-604d7764f6","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-604d7764f6","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-604d7764f6","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-604d7764f6","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize,tekton.dev/taskRunUID=38140b5d-8dc5-4e16-8b68-67464244fcca"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-summary\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-summary\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-build,tekton.dev/taskRunUID=9b96e656-e715-4d24-bd77-ce4bbb5ffaec"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-build\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-build\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository,tekton.dev/taskRunUID=4f742a4e-998a-4856-ba82-9b99eee34ae1"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-deploy,tekton.dev/taskRunUID=d3a808a6-8eb4-4c8b-9efc-f2e7c39496f3"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-summarize,tekton.dev/taskRunUID=60f2e7dd-4bc9-48e1-940c-cac5d6ee90ad"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository,tekton.dev/taskRunUID=5be5226f-d9d4-4679-8487-213c7d2311e9"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-build,tekton.dev/taskRunUID=940e6104-38e6-49ff-aae5-10a6007029c1"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan,tekton.dev/taskRunUID=ac0db187-f53a-40c8-86a6-6e2740e44287"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-scan\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-scan\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-scan\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-scan\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom,tekton.dev/taskRunUID=7e29eb3c-4b6e-435d-8031-32bc94516c57"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-show-sbom\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-scan,tekton.dev/taskRunUID=91e5e2c6-fa87-4c37-a53e-caff2cc46184"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-604d7764f6,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-clone-repository,tekton.dev/taskRunUID=5de5d729-6886-4c64-88e6-b99f16be721e"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build,tekton.dev/taskRunUID=3655e2c3-644e-4696-9923-dd6ae901bb3c"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-deployment-check,tekton.dev/taskRunUID=cd95fef3-1135-4511-8856-e20157f34c5d"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-show-sbom,tekton.dev/taskRunUID=4b8b79f0-5981-4342-b687-68e0438656c3"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-08T18:25:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-08T18:25:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:25:41.317611 1 request.go:752] "Waited before sending request" delay="1.908840031s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-development/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzc4OTksInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=cdbc9479f"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-08T18:25:43Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:27:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:27:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:27:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:27:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-08T18:27:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-08T18:27:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:27:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:27:09.307957 1 request.go:752] "Waited before sending request" delay="1.322047765s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-dh/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6MzkzODMsInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=85cbfd7896,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-6865ffdb79,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-08T18:27:09Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-08T18:27:09Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:27:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:27:19.308102 1 request.go:752] "Waited before sending request" delay="1.994749066s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-keycloak/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk1NTQsInN0YXJ0Ijoic3lzdGVtOmRlcGxveWVyc1x1MDAwMCJ9&limit=5" {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:27:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:27:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:27:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:27:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check,tekton.dev/taskRunUID=31b9a571-ad4c-4590-b416-fbc921e0d841"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-deploy-check\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-deploy-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-deploy-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-scan,tekton.dev/taskRunUID=baf7dd68-cdb5-41b6-8ccd-5bc5aa6493ce"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-scan\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-scan\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-scan\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-scan\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-scan-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-scan\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-show-sbom,tekton.dev/taskRunUID=4b8b79f0-5981-4342-b687-68e0438656c3"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-e124583558,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"affinity-assistant-e124583558","kind":"StatefulSet","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"affinity-assistant\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071124971,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=verify-conforma,tekton.dev/taskRun=e2e-tests-go-qv1e0a7b3ac4264e6430c635c9eec63a10-verify-conforma,tekton.dev/taskRunUID=d6ccf409-b62c-4c4a-8505-f3abb0e9f3b9"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-verify\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-verify\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-verify\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-verify\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-verify\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-clone-repository,tekton.dev/taskRunUID=5de5d729-6886-4c64-88e6-b99f16be721e"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-deploy,tekton.dev/taskRunUID=d3a808a6-8eb4-4c8b-9efc-f2e7c39496f3"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-scan,tekton.dev/taskRunUID=91e5e2c6-fa87-4c37-a53e-caff2cc46184"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071124971,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=download-sboms,tekton.dev/taskRun=e2e-tests-go-qvx1e0a7b3ac4264e6430c635c9eec63a10-download-sboms,tekton.dev/taskRunUID=19f4473e-768d-49cb-8bae-1a946136c646"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-download\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-download\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-download\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-download\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-download\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom,tekton.dev/taskRunUID=7e29eb3c-4b6e-435d-8031-32bc94516c57"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-build,tekton.dev/taskRunUID=9b96e656-e715-4d24-bd77-ce4bbb5ffaec"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-init\" is referring to an unknown secret \"cosign-pub\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"tpa-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"rox-api-token\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-build-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-build\" is referring to an unknown secret \"gitops-auth-secret\""} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-summarize,tekton.dev/taskRunUID=1bdcc9d1-411c-4617-9bb2-9eaca8e6a79c"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository,tekton.dev/taskRunUID=4f742a4e-998a-4856-ba82-9b99eee34ae1"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-q1e0a7b3ac4264e6430c635c9eec63a10-clone-repository,tekton.dev/taskRunUID=4377853f-01ab-459b-b228-b119035e4f0a"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071124971,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=get-images,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s-get-images,tekton.dev/taskRunUID=9561dae9-0e01-4a04-8473-637263905d33"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan,tekton.dev/taskRunUID=ac0db187-f53a-40c8-86a6-6e2740e44287"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository,tekton.dev/taskRunUID=5be5226f-d9d4-4679-8487-213c7d2311e9"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-show-sbom,tekton.dev/taskRunUID=650737a8-0fab-4552-b6df-3f815f5cf8c6"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-build,tekton.dev/taskRunUID=940e6104-38e6-49ff-aae5-10a6007029c1"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-deployment-check,tekton.dev/taskRunUID=cd95fef3-1135-4511-8856-e20157f34c5d"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-summarize,tekton.dev/taskRunUID=60f2e7dd-4bc9-48e1-940c-cac5d6ee90ad"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/component=affinity-assistant,app.kubernetes.io/instance=affinity-assistant-e124583558,app.kubernetes.io/managed-by=pipelinesascode.tekton.dev,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,apps.kubernetes.io/pod-index=0,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,controller-revision-hash=affinity-assistant-e124583558-7c4c9f4796,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,statefulset.kubernetes.io/pod-name=affinity-assistant-e124583558-0,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build,tekton.dev/taskRunUID=3655e2c3-644e-4696-9923-dd6ae901bb3c"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize,tekton.dev/taskRunUID=38140b5d-8dc5-4e16-8b68-67464244fcca"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-deploy,tekton.dev/taskRunUID=c2c2f1ff-d9ec-4c70-a6e2-61f3be10e7f8"} {"level":"debug","ts":"2026-05-08T18:27:27Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-on-push-ph8w2-deploy-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"info","ts":"2026-05-08T18:27:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:27:31.308611 1 request.go:752] "Waited before sending request" delay="1.996615684s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-prod/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk4NDMsInN0YXJ0Ijoic3lzdGVtOmltYWdlLXB1bGxlcnNcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:27:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-08T18:27:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=5c8d6d56d7"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-development","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:27:35Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=cdbc9479f"} {"level":"info","ts":"2026-05-08T18:27:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:27:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:27:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:37Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:27:37Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:27:37Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:27:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:27:43.307161 1 request.go:752] "Waited before sending request" delay="1.994336671s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-tpa/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6Mzk5OTYsInN0YXJ0Ijoicmh0cGEtb3BlcmF0b3ItYmluZC1qb2JcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:27:43Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"} {"level":"info","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciliation loop has started"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":1,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRoleBinding"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":2,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"RoleBinding"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":3,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"Role"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":4,"Group":"","Version":"v1","Kind":"PersistentVolumeClaim"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":5,"Group":"","Version":"v1","Kind":"Pod"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":6,"Group":"","Version":"v1","Kind":"ReplicationController"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":7,"Group":"apps","Version":"v1","Kind":"Deployment"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":8,"Group":"autoscaling","Version":"v1","Kind":"HorizontalPodAutoscaler"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":9,"Group":"batch","Version":"v1","Kind":"CronJob"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":10,"Group":"apps","Version":"v1","Kind":"ReplicaSet"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":11,"Group":"apps","Version":"v1","Kind":"StatefulSet"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":12,"Group":"networking.k8s.io","Version":"v1","Kind":"NetworkPolicy"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":13,"Group":"rbac.authorization.k8s.io","Version":"v1","Kind":"ClusterRole"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":14,"Group":"policy","Version":"v1","Kind":"PodDisruptionBudget"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":15,"Group":"apps.openshift.io","Version":"v1","Kind":"DeploymentConfig"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":16,"Group":"batch","Version":"v1","Kind":"Job"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":17,"Group":"","Version":"v1","Kind":"ServiceAccount"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":18,"Group":"","Version":"v1","Kind":"Service"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":19,"Group":"apps","Version":"v1","Kind":"DaemonSet"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"apiResource","no":20,"Group":"networking.k8s.io","Version":"v1","Kind":"Ingress"} {"level":"info","ts":"2026-05-08T18:29:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":2,"labels":"batch.kubernetes.io/controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,batch.kubernetes.io/job-name=tssc-tekton-configuration,controller-uid=1c4814f7-b45f-4fcc-a9b9-4f4c7d9badfb,job-name=tssc-tekton-configuration"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc","items":1,"labels":"app.kubernetes.io/instance=tssc-pipelines,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-pipelines,app.kubernetes.io/version=1.21,helm.sh/chart=tssc-pipelines-1.9.0"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc"} {"level":"info","ts":"2026-05-08T18:29:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=598876d8c8"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,batch.kubernetes.io/job-name=ctlog-createtree-job-vd4bn,controller-uid=30f67dbb-da14-470e-929d-d30f48f21e71,job-name=ctlog-createtree-job-vd4bn"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=75d89884dc"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=cb994f8cc"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=65c98f95d4"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,batch.kubernetes.io/controller-uid=b566a535-14ef-42cf-8198-081df703f18f,batch.kubernetes.io/job-name=tuf-repository-init-m8m8j,controller-uid=b566a535-14ef-42cf-8198-081df703f18f,job-name=tuf-repository-init-m8m8j,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-backfill,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":3,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-installation,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":6,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6589975f96"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7f4959c454"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=668c87d747"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=ctlog,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=ctlog,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":7,"labels":"app.kubernetes.io/component=trillian-logsigner,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logsigner,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-server,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=rekor-search-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=segment-backup-installation,app.kubernetes.io/instance-namespace=tssc-tas,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=segment-backup-nightly-metrics,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=backfill-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=backfill-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,batch.kubernetes.io/job-name=rekor-createtree-job-bzhkr,controller-uid=9a5b3e43-f178-4b3b-b7d8-46fa76c52148,job-name=rekor-createtree-job-bzhkr"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":2,"labels":"batch.kubernetes.io/controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,batch.kubernetes.io/job-name=segment-backup-installation-s29sk,controller-uid=bc4f0b44-55ac-481b-ac06-da0e187f2a59,job-name=segment-backup-installation-s29sk"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-db,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-db,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=6c7c976446"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=trillian-logserver,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=trillian-logserver,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=7554ff9b47"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-ui,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-search-ui,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=tuf,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=tuf-repository-init,app.kubernetes.io/part-of=trusted-artifact-signer,rhtas.redhat.com/resource=tuf"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":4,"labels":"app.kubernetes.io/component=createtree,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":5,"labels":"app.kubernetes.io/component=rekor-redis,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=rekor-redis,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tas","items":1,"labels":"app.kubernetes.io/component=fulcio,app.kubernetes.io/instance=trusted-artifact-signer,app.kubernetes.io/managed-by=controller-manager,app.kubernetes.io/name=fulcio,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tas"} {"level":"info","ts":"2026-05-08T18:29:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=5c8d6d56d7"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-stage","object":"e2e-tests-go-qvxivgiw","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"container-image\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-stage","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-stage"} {"level":"info","ts":"2026-05-08T18:29:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:29:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":4,"labels":"app.kubernetes.io/instance=developer-hub,app.kubernetes.io/name=backstage"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"rhdh.redhat.com/app=backstage-psql-developer-hub"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":1,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":5,"labels":"pod-template-hash=85cbfd7896,rhdh.redhat.com/app=backstage-developer-hub"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-dh","items":3,"labels":"apps.kubernetes.io/pod-index=0,controller-revision-hash=backstage-psql-developer-hub-6865ffdb79,rhdh.redhat.com/app=backstage-psql-developer-hub,statefulset.kubernetes.io/pod-name=backstage-psql-developer-hub-0"} {"level":"debug","ts":"2026-05-08T18:29:07Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-dh"} {"level":"info","ts":"2026-05-08T18:29:07Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:29:09.327664 1 request.go:752] "Waited before sending request" delay="1.34041107s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-gitops/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE0NDksInN0YXJ0Ijoic3lzdGVtOmltYWdlLWJ1aWxkZXJzXHUwMDAwIn0&limit=5" {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis-ha,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":10,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":4,"labels":"app.kubernetes.io/name=tssc-gitops-application-controller,apps.kubernetes.io/pod-index=0,controller-revision-hash=tssc-gitops-application-controller-6db44c79bb,statefulset.kubernetes.io/pod-name=tssc-gitops-application-controller-0"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/name=tssc-gitops-applicationset-controller,pod-template-hash=77c79c757"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-redis,pod-template-hash=7bb468974"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-repo-server,pod-template-hash=766df54886"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,dex.config.changed=05082026-180726-UTC,pod-template-hash=784f6d47d"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"batch.kubernetes.io/controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,batch.kubernetes.io/job-name=tssc-gitops-post-deploy,controller-uid=01e736f0-9a79-40bf-a584-4b91b70dc037,job-name=tssc-gitops-post-deploy"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=applicationset-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-applicationset-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=redis,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=repo-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-repo-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/name=tssc-gitops-dex-server,pod-template-hash=b6689d66b"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":3,"labels":"app.kubernetes.io/component=application-controller,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/instance=tssc-gitops,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/version=1.20,helm.sh/chart=tssc-gitops-1.9.0"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":7,"labels":"app.kubernetes.io/name=tssc-gitops-server,pod-template-hash=58b584cfc7"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":5,"labels":"app.kubernetes.io/component=dex-server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":1,"labels":"app.kubernetes.io/component=metrics,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-metrics,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-dex-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-gitops","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-redis,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:11Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-gitops"} {"level":"info","ts":"2026-05-08T18:29:11Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"app.kubernetes.io/instance=tssc-iam,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":1,"labels":"olm.copiedFrom=rhbk-operator,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-keycloak,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":4,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":6,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak,apps.kubernetes.io/pod-index=0,controller-revision-hash=keycloak-dcf95d65b,statefulset.kubernetes.io/pod-name=keycloak-0"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":5,"labels":"app=keycloak-pgsql-bee,phase=reference,pod-template-hash=9c8768f87"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":2,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak-realm-import,batch.kubernetes.io/controller-uid=303f9212-801e-405d-91ea-71666a54063b,batch.kubernetes.io/job-name=tssc-iam,controller-uid=303f9212-801e-405d-91ea-71666a54063b,job-name=tssc-iam"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-keycloak","items":8,"labels":"app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator,app=keycloak"} {"level":"debug","ts":"2026-05-08T18:29:15Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-keycloak"} {"level":"info","ts":"2026-05-08T18:29:15Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.deployment-spec-hash=7RsJqhQAMOaG1e003BCLYNeLyTyf6VbXcl6jVL,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=4O0tiObYrrFrlUWdzQmHj2sVWezFneLyYDCeOp,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":2,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=rhbk-operator,olm.owner=rhbk-operator.v26.4.11-opr.2,olm.permissions.hash=36jW9QlaNsvzPJGRuCuNRcHk7hOZa26E3ofORt,operators.coreos.com/rhbk-operator.rhbk-operator="} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"rhbk-operator","items":4,"labels":"name=rhbk-operator,pod-template-hash=68f8d47866"} {"level":"debug","ts":"2026-05-08T18:29:19Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"rhbk-operator"} {"level":"info","ts":"2026-05-08T18:29:19Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:29:21.328692 1 request.go:752] "Waited before sending request" delay="1.777828735s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/tssc-app-ci/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE2MDIsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-clone-repository,tekton.dev/taskRunUID=5de5d729-6886-4c64-88e6-b99f16be721e"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-show-sbom,tekton.dev/taskRunUID=7e29eb3c-4b6e-435d-8031-32bc94516c57"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=2,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=ea1ce24802b41538a8943014373e240a7567123e,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRunUID=14262200-19b6-4ae8-8419-c5022c5e28e3,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-q8b10a0e2877957c65b171d0cb03d0e70-clone-repository,tekton.dev/taskRunUID=a4d00c78-f52f-439c-aae3-d29d59b570e5"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-clone\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-symlink-check\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-clone\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-q8b10a0e287795b2ad4a590b1e56aef5b9d76918fdf410-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-symlink-check\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-scan,tekton.dev/taskRunUID=ac0db187-f53a-40c8-86a6-6e2740e44287"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-deploy,tekton.dev/taskRunUID=c2c2f1ff-d9ec-4c70-a6e2-61f3be10e7f8"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-summarize,tekton.dev/taskRunUID=38140b5d-8dc5-4e16-8b68-67464244fcca"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-build,tekton.dev/taskRunUID=9b96e656-e715-4d24-bd77-ce4bbb5ffaec"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-clone-repository,tekton.dev/taskRunUID=4f742a4e-998a-4856-ba82-9b99eee34ae1"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=deploy,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-deploy,tekton.dev/taskRunUID=d3a808a6-8eb4-4c8b-9efc-f2e7c39496f3"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071380802,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=2,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=ea1ce24802b41538a8943014373e240a7567123e,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRunUID=14262200-19b6-4ae8-8419-c5022c5e28e3,tekton.dev/pipelineTask=verify-conforma,tekton.dev/taskRun=e2e-tests-go-qv8b10a0e2877957c65b171d0cb03d0e70-verify-conforma,tekton.dev/taskRunUID=b64adecf-c1bc-4685-98f5-e0a68047905b"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-verify\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-verify\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-verify\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-verify\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv8b10a0e28779eb7dbe0c1d6e0c4f5f7520f629d2bbd0-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-verify\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071124971,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=download-sboms,tekton.dev/taskRun=e2e-tests-go-qvx1e0a7b3ac4264e6430c635c9eec63a10-download-sboms,tekton.dev/taskRunUID=19f4473e-768d-49cb-8bae-1a946136c646"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-download\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-download\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-download\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-download\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx1e0a7b3ac4208f5bf275028df7a080e4ccbe0bfee5c-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-download\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071380802,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=2,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=ea1ce24802b41538a8943014373e240a7567123e,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRunUID=14262200-19b6-4ae8-8419-c5022c5e28e3,tekton.dev/pipelineTask=get-images,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc-get-images,tekton.dev/taskRunUID=ba467e25-9c8d-4bd9-ac94-7805d2aa4b89"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-init\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-get-images\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-get-images\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-init\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvxivgiw-gitop14b1f5196b3874fccdbd05ed61c5ba3d-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-get-images\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-clone-repository,tekton.dev/taskRunUID=5be5226f-d9d4-4679-8487-213c7d2311e9"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-build,tekton.dev/taskRunUID=940e6104-38e6-49ff-aae5-10a6007029c1"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071124971,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=verify-conforma,tekton.dev/taskRun=e2e-tests-go-qv1e0a7b3ac4264e6430c635c9eec63a10-verify-conforma,tekton.dev/taskRunUID=d6ccf409-b62c-4c4a-8505-f3abb0e9f3b9"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-verify\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-verify\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"restart-policy","check_description":"Indicates when a deployment-like object does not use a restart policy","check_remediation":"Set up the restart policy for your object to 'Always' or 'OnFailure' to increase the fault tolerance.","check_failure_reason":"object has a restart policy defined with 'Never' but the only accepted restart policies are '[Always OnFailure]'"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"prepare\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"place-scripts\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"working-dir-initializer\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"step-verify\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-cpu-requirements","check_description":"Indicates when containers do not have CPU requests and limits set.","check_remediation":"Set CPU requests for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-verify\" has cpu request 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"prepare\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"place-scripts\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"working-dir-initializer\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qv1e0a7b3ac426c9c5d8762aaf7a68e804a9a6e2625d85-pod","kind":"Pod","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"step-verify\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071380802,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=2,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=ea1ce24802b41538a8943014373e240a7567123e,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRunUID=14262200-19b6-4ae8-8419-c5022c5e28e3,tekton.dev/pipelineTask=download-sboms,tekton.dev/taskRun=e2e-tests-go-qvx8b10a0e2877957c65b171d0cb03d0e70-download-sboms,tekton.dev/taskRunUID=3f1a36af-2290-4a16-a62f-c52532333e93"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx8b10a0e28777a687e51af9be1baf8666950a00fe2b6-pod","kind":"Pod","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx8b10a0e28777a687e51af9be1baf8666950a00fe2b6-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-download\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx8b10a0e28777a687e51af9be1baf8666950a00fe2b6-pod","kind":"Pod","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"step-download\" is referring to an unknown secret \"tas-secret\""} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx8b10a0e28777a687e51af9be1baf8666950a00fe2b6-pod","kind":"Pod","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx8b10a0e28777a687e51af9be1baf8666950a00fe2b6-pod","kind":"Pod","validation":"non-existent-service-account","check_description":"Indicates when pods reference a service account that is not found.","check_remediation":"Create the missing service account, or refer to an existing service account.","check_failure_reason":"serviceAccount \"pipeline\" not found"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-app-ci","object":"e2e-tests-go-qvx8b10a0e28777a687e51af9be1baf8666950a00fe2b6-pod","kind":"Pod","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071124971,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=upload-sboms,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s-upload-sboms,tekton.dev/taskRunUID=601e546c-e1c9-400a-beac-236c9656615b"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-show-sbom,tekton.dev/taskRunUID=650737a8-0fab-4552-b6df-3f815f5cf8c6"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-summarize,tekton.dev/taskRunUID=60f2e7dd-4bc9-48e1-940c-cac5d6ee90ad"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071380802,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=2,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=ea1ce24802b41538a8943014373e240a7567123e,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc,tekton.dev/pipelineRunUID=14262200-19b6-4ae8-8419-c5022c5e28e3,tekton.dev/pipelineTask=upload-sboms,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-q7jlc-upload-sboms,tekton.dev/taskRunUID=861111af-d37f-4182-abed-cc18ca06427d"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-scan,tekton.dev/taskRunUID=91e5e2c6-fa87-4c37-a53e-caff2cc46184"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=show-sbom,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-show-sbom,tekton.dev/taskRunUID=4b8b79f0-5981-4342-b687-68e0438656c3"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=clone-repository,tekton.dev/taskRun=e2e-tests-go-q1e0a7b3ac4264e6430c635c9eec63a10-clone-repository,tekton.dev/taskRunUID=4377853f-01ab-459b-b228-b119035e4f0a"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070355654,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=2b94ec97c7009b0ade9fe3ed93c513cc186ac8cf,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56,tekton.dev/pipelineRunUID=f016ceeb-65a3-4676-9e04-4ffa327a88e3,tekton.dev/pipelineTask=build,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-pull-request-zcg56-build,tekton.dev/taskRunUID=3655e2c3-644e-4696-9923-dd6ae901bb3c"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-deployment-check,tekton.dev/taskRunUID=31b9a571-ad4c-4590-b416-fbc921e0d841"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=scan,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-scan,tekton.dev/taskRunUID=baf7dd68-cdb5-41b6-8ccd-5bc5aa6493ce"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070711554,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=8cba602acd3dc1fb696e71a5b42ec3822484162d,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-ph8w2,tekton.dev/pipelineRunUID=026a8ffd-a87a-4757-a283-533b22e87534,tekton.dev/pipelineTask=summarize,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-ph8w2-summarize,tekton.dev/taskRunUID=1bdcc9d1-411c-4617-9bb2-9eaca8e6a79c"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,build.appstudio.redhat.com/build_type=docker,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75070204954,pipelinesascode.tekton.dev/event-type=push,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-on-push,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-repository,pipelinesascode.tekton.dev/sha=82838fa93d9a98faf8f866c9390cce229b1a2de8,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-on-push-vmg2h,tekton.dev/pipelineRunUID=b56db74a-49d0-4eef-a4d3-429567131f96,tekton.dev/pipelineTask=deployment-check,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-on-push-vmg2h-deployment-check,tekton.dev/taskRunUID=cd95fef3-1135-4511-8856-e20157f34c5d"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-ci","items":1,"labels":"app.kubernetes.io/managed-by=tekton-pipelines,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,app.kubernetes.io/version=v0.39.5,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pipelinesascode.tekton.dev/check-run-id=75071124971,pipelinesascode.tekton.dev/event-type=pull_request,pipelinesascode.tekton.dev/original-prname=e2e-tests-go-qvxivgiw-gitops-on-pull-request,pipelinesascode.tekton.dev/pull-request=1,pipelinesascode.tekton.dev/repository=e2e-tests-go-qvxivgiw-gitops-repository,pipelinesascode.tekton.dev/sha=9bc0e7d305f805acfd613970d6bf1bb2b8ecfb1f,pipelinesascode.tekton.dev/state=started,pipelinesascode.tekton.dev/url-org=rhtap-rhdh-qe,pipelinesascode.tekton.dev/url-repository=e2e-tests-go-qvxivgiw-gitops,tekton.dev/memberOf=tasks,tekton.dev/pipeline=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s,tekton.dev/pipelineRunUID=905d406d-69da-4709-b312-49404d0e3624,tekton.dev/pipelineTask=get-images,tekton.dev/taskRun=e2e-tests-go-qvxivgiw-gitops-on-pull-request-6b29s-get-images,tekton.dev/taskRunUID=9561dae9-0e01-4a04-8473-637263905d33"} {"level":"debug","ts":"2026-05-08T18:29:23Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-ci"} {"level":"info","ts":"2026-05-08T18:29:23Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-prod","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:27Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-prod"} {"level":"info","ts":"2026-05-08T18:29:27Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=5c8d6d56d7"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=55f597b869"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-application-controller,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-nnbbqufc,app.kubernetes.io/part-of=e2e-tests-go-nnbbqufc,argocd/app-name=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-id=e2e-tests-go-nnbbqufc,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-nnbbqufc,pod-template-hash=58b6f49f45"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":5,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus,pod-template-hash=778d4747d4"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qkdjwyus,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qkdjwyus,app.kubernetes.io/part-of=e2e-tests-go-qkdjwyus,argocd/app-name=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-id=e2e-tests-go-qkdjwyus,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qkdjwyus"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":4,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/instance=e2e-tests-go-qvxivgiw,app.kubernetes.io/part-of=e2e-tests-go-qvxivgiw,argocd/app-name=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-id=e2e-tests-go-qvxivgiw,backstage.io/kubernetes-namespace=tssc-app,janus-idp.io/tekton=e2e-tests-go-qvxivgiw,pod-template-hash=cdbc9479f"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":2,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=tssc-gitops,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-app-development","items":1,"labels":"app.kubernetes.io/managed-by=tssc-gitops,app.kubernetes.io/name=argocd-server,app.kubernetes.io/part-of=argocd"} {"level":"debug","ts":"2026-05-08T18:29:31Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-app-development"} {"level":"info","ts":"2026-05-08T18:29:31Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:29:33.329066 1 request.go:752] "Waited before sending request" delay="1.897951775s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/trusted-artifact-signer/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE3MzgsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:29:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer,pod-template-hash=69447b45bd"} {"level":"debug","ts":"2026-05-08T18:29:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:33Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"trusted-artifact-signer","items":5,"labels":"app.kubernetes.io/component=client-server,app.kubernetes.io/part-of=trusted-artifact-signer"} {"level":"debug","ts":"2026-05-08T18:29:33Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"trusted-artifact-signer"} {"level":"info","ts":"2026-05-08T18:29:33Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:29:35Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=server,pod-template-hash=69557d6c9d"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"server","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app=tpa-pgsql-bee,phase=reference,pod-template-hash=5f9d857cf7"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"olm.managed=true"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=ayWt7Ra7j6VaUOWVVnLRSjaZXaH1qykCBmO9pt,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"control-plane=controller-manager,pod-template-hash=5b6d6bcbdc"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"type=importer-working-directory"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":4,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/name=importer,pod-template-hash=6f455fcc59"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"dnsconfig-options","check_description":"Alert on deployments that have no specified dnsConfig options","check_remediation":"Specify dnsconfig options in your Pod specification to ensure the expected DNS setting on the Pod. Refer to https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-dns-config for details.","check_failure_reason":"Object does not define any DNSConfig rules."} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"env-value-from","check_description":"Indicates when objects use a secret or configmap not included in the deployment.","check_remediation":"Change the name or key to match a secret / configmap in the deployment.","check_failure_reason":"The container \"service\" is referring to an unknown secret \"tpa-pgsql-user\""} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"minimum-three-replicas","check_description":"Indicates when a deployment uses less than three replicas","check_remediation":"Increase the number of replicas in the deployment to at least three to increase the fault tolerance of the deployment.","check_failure_reason":"object has 1 replica but minimum required replicas is 3"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"no-node-affinity","check_description":"Alert on deployments that have no node affinity defined","check_remediation":"Specify node-affinity in your pod specification to ensure that the orchestrator attempts to schedule replicas on specified nodes. Refer to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity for details.","check_failure_reason":"object does not define any node affinity rules."} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"non-isolated-pod","check_description":"Alert on deployment-like objects that are not selected by any NetworkPolicy.","check_remediation":"Ensure pod does not accept unsafe traffic by isolating it with a NetworkPolicy. See https://cloud.redhat.com/blog/guide-to-kubernetes-ingress-network-policies for more details.","check_failure_reason":"pods created by this object are non-isolated"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"run-as-non-root","check_description":"Indicates when containers are not set to runAsNonRoot.","check_remediation":"Set runAsUser to a non-zero number and runAsNonRoot to true in your pod or container securityContext. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ for details.","check_failure_reason":"container \"service\" is not set to runAsNonRoot"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"validationEngine","msg":"New Metric has been created","namespace":"tssc-tpa","object":"importer","kind":"Deployment","validation":"unset-memory-requirements","check_description":"Indicates when containers do not have memory requests and limits set.","check_remediation":"Set memory limits for your container based on its requirements. Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.","check_failure_reason":"container \"service\" has memory limit 0"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/managed-by=kustomize,app.kubernetes.io/name=rhtpa-operator,control-plane=controller-manager,olm.deployment-spec-hash=9VPLxFzzZEFCihbIorY1e17RuqWiY7CXeXLOOk,olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=storage,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":5,"labels":"app.kubernetes.io/component=server,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=server,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":2,"labels":"app.kubernetes.io/component=importer,app.kubernetes.io/instance=trustedprofileanalyzer,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=importer,app.kubernetes.io/part-of=trustify,app.kubernetes.io/version=2.2.4"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":1,"labels":"olm.managed=true,olm.owner.kind=ClusterServiceVersion,olm.owner.namespace=tssc-tpa,olm.owner=rhtpa-operator.v1.1.4,olm.permissions.hash=89zmJTEa8x4dF5PYcd2jJAXBQdRMGCux5nsqKM,operators.coreos.com/rhtpa-operator.tssc-tpa="} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"tssc-tpa","items":3,"labels":"app.kubernetes.io/managed-by=Helm"} {"level":"debug","ts":"2026-05-08T18:29:39Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"tssc-tpa"} {"level":"info","ts":"2026-05-08T18:29:39Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} {"level":"info","ts":"2026-05-08T18:29:41Z","msg":"apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+"} I0508 18:29:43.329067 1 request.go:752] "Waited before sending request" delay="1.896948008s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/rbac.authorization.k8s.io/v1/namespaces/open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v/rolebindings?continue=eyJ2IjoibWV0YS5rOHMuaW8vdjEiLCJydiI6NDE4NTQsInN0YXJ0IjoiL2RlZGljYXRlZC1hZG1pbnMtYWxlcnQtcm91dGluZy1lZGl0LTBcdTAwMDAifQ&limit=5" {"level":"debug","ts":"2026-05-08T18:29:43Z","logger":"GenericReconciler","msg":"Reconciling Namespace Resources","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v","items":2,"labels":"open-cluster-management.io/created-by-klusterlet=klusterlet-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"debug","ts":"2026-05-08T18:29:43Z","logger":"GenericReconciler","msg":"All objects are validated, ending loop","ns":"open-cluster-management-2q5t6d8o70tk82vgfn41efc13ms1br5v"} {"level":"info","ts":"2026-05-08T18:29:43Z","logger":"GenericReconciler","msg":"Reconciliation loop has ended"}